Critical UEFI Firmware Vulnerability Affects Nearly All Servers
Anthropic and Google researchers discovered CVE-2026-97631 in TianoCore EDK II, allowing a single crafted packet to hijack a server during network boot before Secure Boot runs — impacting almost every server on Earth.
What we know
An account on X broke the story with 79k views and 2k likes: the flaw sits in TianoCore EDK II, embedded in the UEFI firmware of most servers worldwide. Because the exploit fires during network boot, it precedes Secure Boot checks entirely, making it particularly severe. The research was a joint effort by Anthropic and Google teams.
By the Global Eye 24 desk, with AI assistance. Updated as the story develops. Spot an error? Write to corrections@globaleye24.com.