Most Servers on the Planet Are Vulnerable to This Firmware Code-Execution Flaw

First reported by Ars Technica at · Updated · 7 sources

The critical flaw in UEFI firmware—used by most server vendors and data centers—allows attackers to execute code early in the boot process.

Covered by 7 publishers within 24 hours of the first report.

Summary from Wired.

Reporting7

Ars Technica Code-execution flaw in UEFI firmware affects most servers on planet Earth · Dan Goodin
Cyber Security News Critical UEFI Firmware Flaw Could Expose Millions of Servers to Pre-Boot Code Execution · Guru Baran
Security Affairs CVE-2026-97631: 16-Year-Old UEFI Flaw Threatens Servers · Pierluigi Paganini
The Hacker News Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers · info@thehackernews.com (The Hacker News)
TechRadar Most data centers and servers on the planet could be vulnerable to dangerous UEFI firmware flaw — here's what we know · Sead Fadilpašić
The Next Web Critical UEFI firmware flaw leaks early, leaving servers waiting for a fix · Ana Maria Constantin
Wired Most Servers on the Planet Are Vulnerable to This Firmware Code-Execution Flaw · Dan Goodin, Ars Technica

Discussion

Hacker News 302 points, 217 comments

Related

Atlassian Patches 75 Flaws in Data Center and Server Products
Russian social media giant VK faces disruptions after data center drone strike
Nvidia partners with PreussenElektra to explore deployment of AI data centers at former nuclear sites in Germany
TPG pursues $5bn acquisition of UK data centre group Ark

Topics Data centers