{"metadata": {"vulnerability": "CVE-2026-97631", "count": 71, "kinds": {"milestone": 4, "sighting": 61, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-09-24T16:56:45.359Z", "date_only": false, "value": "2026-09-24T16:56:45.359Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-97631", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-22T16:32:00Z", "date_only": false, "value": "2026-10-22T16:32:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / TianoCore", "record": "CVE-2026-97631", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-22T16:32:27.619Z", "date_only": false, "value": "2026-10-22T16:32:27.619Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-97631", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-22T16:37:13.437Z", "date_only": false, "value": "2026-10-22T16:37:13.437Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / TianoCore", "record": "CVE-2026-97631", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-22T16:39:37.563Z", "date_only": false, "value": "2026-10-22T16:39:37.563372Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117485546839476543", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "cbc25329-845f-412c-abac-d972884eb2f9", "content": "CVE-2026-97631 Pre-boot RCE in EDK II PXE driver EDK2 contains a vulnerability in BIOS where a user may cause \u201cOut-of-boundsWrite\u201d, ClassicBuffer Overflow, and \u201cIncorrect Calculation of Buffer Size\u201d by remote access. Successful exploitation of this vulnerabilitycan lead to arbitrarycode execution. It could also impactConfidentiality,Integrity,and Availability.\nhttps://www.cve.org/CVERecord?id=CVE-2026-97631https://github.com/tianocore/edk2/security/advisories/GHSA-99cj-7hg9-mp4m#TianoCore #EDK2#CVE_2026_97631#bot", "url": "https://infosec.exchange/users/cve/statuses/117485546839476543"}, {"timestamp": "2026-10-22T17:17:00Z", "date_only": false, "value": "2026-10-22T17:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-97631", "record": "UBUNTU-CVE-2026-97631", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-22T17:17:02.027Z", "date_only": false, "value": "2026-10-22T17:17:02.027", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-97631", "record": "FKIE_CVE-2026-97631", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-22T17:40:46.877Z", "date_only": false, "value": "2026-10-22T17:40:46.877", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-97631", "record": "FKIE_CVE-2026-97631", "field": "lastModified"}, {"timestamp": "2026-10-27T20:30:34.150Z", "date_only": false, "value": "2026-10-27T20:30:34.150841Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/j8bird.bsky.social/post/3myv3cr35tk2h", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "781127c0-07c4-409c-aee1-9dedddadc788", "content": "The people that discovered CVE-2026-97631 BIOS vulnerability wanted to keep it secret \n\nIt was disclosed in github anyway.\n\nThe AI enabled hacking race will be a wild ride.\n\ngithub.com/tianocore/ed...", "url": "https://bsky.app/profile/j8bird.bsky.social/post/3myv3cr35tk2h"}, {"timestamp": "2026-10-27T20:35:44.725Z", "date_only": false, "value": "2026-10-27T20:35:44.725579Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jimsdouglas.bsky.social/post/3myv3lzrtw22g", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "732dfa48-497b-49a4-a120-9204049db948", "content": "\"CVE-2026-97631 doesn\u2019t affect home and small office users, or any other users who boot their devices solely from disk drives.\"", "url": "https://bsky.app/profile/jimsdouglas.bsky.social/post/3myv3lzrtw22g"}, {"timestamp": "2026-10-27T21:11:59.157Z", "date_only": false, "value": "2026-10-27T21:11:59.157728Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3myv5mtadod2l", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "c89d002c-aecb-4a86-9b3d-44cb78d3c047", "content": "CVE-2026-97631 is a critical TianoCore EDK II boot-time memory-corruption flaw in an ICMP component that enables pre-OS malicious code execution.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3myv5mtadod2l"}, {"timestamp": "2026-10-27T21:12:56.958Z", "date_only": false, "value": "2026-10-27T21:12:56.958200Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3myv5ok6wow2p", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "f214f85e-e18d-4a95-9cde-3fdfdf6e69e5", "content": "CVE-2026-97631 is a critical TianoCore EDK II boot-time memory-corruption flaw in an ICMP component that enables pre-OS malicious code execution.\n", "url": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3myv5ok6wow2p"}, {"timestamp": "2026-10-27T21:25:44.539Z", "date_only": false, "value": "2026-10-27T21:25:44.539960Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/samoskal.bsky.social/post/3myv6fg7qus26", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "e445ed57-35a1-44aa-b724-b891e4b75fb7", "content": "\"CVE-2026-97631 doesn\u2019t affect home and small office users, or any other users who boot their devices solely from disk drives. Instead, it applies only to organizations with machines that boot from local networks, or conceivably from Internet-connected resources\"", "url": "https://bsky.app/profile/samoskal.bsky.social/post/3myv6fg7qus26"}, {"timestamp": "2026-10-27T23:14:06.706Z", "date_only": false, "value": "2026-10-27T23:14:06.706440Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacks.gr/post/3myveh6sf2uow", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "c0fdfee2-88cb-4df9-b039-ae6adc1339dd", "content": "CVE-2026-97631 is rated 9.5/10: an EDK II PXE-Base Code memory-corruption flaw can enable code execution early in boot, before Secure Boot and TPM defenses load.\n\nI\u2026\n\nhttps://en.hacks.gr/sovaro-provlima-asfaleias-se-logismiko-ekkinisis-epaggelmatikon-systimaton-pagkosmios/\n\n#EDKII #PXE #UEFIFirmware", "url": "https://bsky.app/profile/hacks.gr/post/3myveh6sf2uow"}, {"timestamp": "2026-10-27T23:16:55.152Z", "date_only": false, "value": "2026-10-27T23:16:55.152676Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/oraclesean.com/post/3myvem4jaf224", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "aa395170-0a47-4e68-b63a-153354ec2df5", "content": "The good news? This is CVE-2026-97631, only 2,368 vulnerabilities left in the year before it triggers a Y2K style overflow.", "url": "https://bsky.app/profile/oraclesean.com/post/3myvem4jaf224"}, {"timestamp": "2026-10-28T05:20:04Z", "date_only": false, "value": "2026-10-28T05:20:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/rilevata-vulnerabilita-in-tianocore-edk-ii", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "be1538a7-e677-4586-8513-cf0cad718d13", "url": "https://www.acn.gov.it/portale/w/rilevata-vulnerabilita-in-tianocore-edk-ii"}, {"timestamp": "2026-10-28T05:56:38.514Z", "date_only": false, "value": "2026-10-28T05:56:38.514914Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3myw2wyqfcj2x", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "a743a3a2-4a3a-4645-968f-a76bbc99f336", "content": "Code-execution flaw in UEFI firmware affects most servers on planet Earth (CVE-2026-97631) #appsec", "url": "https://bsky.app/profile/eyalestrin.bsky.social/post/3myw2wyqfcj2x"}, {"timestamp": "2026-10-28T07:02:04.796Z", "date_only": false, "value": "2026-10-28T07:02:04.796051Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3myw6lxscyn2z", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "d7345c51-0949-44e6-9653-2b3491323d56", "content": "Critical UEFI Vulnerability CVE-2026-97631 Could Enable Pre-Boot Code Execution Through\u00a0PXE\n\nA critical flaw in the EDK II firmware framework could allow unauthenticated attackers to corrupt memory and potentially execute malicious code before Windows or Linux starts. The vulnerability affects the\u2026", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3myw6lxscyn2z"}, {"timestamp": "2026-10-28T07:19:37.970Z", "date_only": false, "value": "2026-10-28T07:19:37.970853Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3myw7lfaxfr2o", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "5831a8e7-605e-4809-884e-fed3b545249f", "content": "Top 3 CVE for last 7 days:\nCVE-2026-109618: 1306 interactions\nCVE-2026-109619: 1015 interactions\nCVE-2026-111497: 436 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-111497: 41 interactions\nCVE-2026-109618: 32 interactions\nCVE-2026-97631: 18 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3myw7lfaxfr2o"}, {"timestamp": "2026-10-28T07:42:35.159Z", "date_only": false, "value": "2026-10-28T07:42:35.159956Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecurity.page/post/3mywaptqpb42y", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "94ef514e-e7a1-465c-b77c-67f8c269a4ee", "content": "A code-execution flaw in UEFI firmware (CVE-2026-97631) hits servers that boot from the network via PXE, triggered through ICMP handling during boot. Disk-booting machines and home users are unaffected. Attackers could implant bootkit-style persistence before an OS ever loads.", "url": "https://bsky.app/profile/cybersecurity.page/post/3mywaptqpb42y"}, {"timestamp": "2026-10-28T07:52:34.192Z", "date_only": false, "value": "2026-10-28T07:52:34.192384Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mywbgb5erv2t", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "97acc87b-1669-47a8-b8ac-1b6d896e6fd1", "content": "CVE-2026-97631 in EDK II PXE lets attackers execute code before the OS boots. Patch merged \u2014 vendors still need to ship updates. #UEFI #Firmware #Cybersecurity #PXE #Vulnerability #BootSecurity https://thedailytechfeed.com/critical-uefi-flaw-lets-remote-attackers-run-code-before-boot/", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3mywbgb5erv2t"}, {"timestamp": "2026-10-28T07:56:59.816Z", "date_only": false, "value": "2026-10-28T07:56:59.816906Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackwatch.de/post/3mywbo67osk24", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "eb3ac5dc-83b0-47e1-a85c-1ee006d5d76e", "content": "Kritische UEFI-L\u00fccke CVE-2026-97631 (CVSS 9.5) im PXE-Treiber von EDK II: Code l\u00e4uft vor Secure Boot. Relevant f\u00fcr Server mit PXE-Boot, Angreifer muss im selben Netz sein. Fix per Firmware-Update vom Hersteller. Bis dahin PXE aus, Boot-Netze trennen.\nVideo und Stimme: KI-generiert.", "url": "https://bsky.app/profile/stackwatch.de/post/3mywbo67osk24"}, {"timestamp": "2026-10-28T08:30:07.876Z", "date_only": false, "value": "2026-10-28T08:30:07.876941Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mywdjhe65h2r", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "d566f6fb-4104-4758-9707-8360f598f608", "content": "\ud83d\udce2 [VULN] Faille UEFI CVE-2026-97631, du code ex\u00e9cutable via PXE avant Secure Boot\n\nCVE-2026-97631 est une vuln\u00e9rabilit\u00e9 d'EDK II, le code open source dont d\u00e9rivent de nombreux firmwares UEFI (le programme qui d\u00e9marre en premier quand on allume un ordinateur, avant \u2026\n\n#Vuln\u00e9rabilit\u00e9 #CVE #Cyberveille", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mywdjhe65h2r"}, {"timestamp": "2026-10-28T09:19:26.460Z", "date_only": false, "value": "2026-10-28T09:19:26.460720Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/five-oclick-tech.bsky.social/post/3mywgbn2xfi2z", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "42aa1f82-6187-4512-9dc5-e51a72093d9a", "content": "Most servers face UEFI boot code risk \ud83d\udc7e\n\nA critical code-execution flaw (CVE-2026-97631) in TianoCore EDK II, used by most server UEFI firmware, has been `published` with details now public due to a premature disclosure.", "url": "https://bsky.app/profile/five-oclick-tech.bsky.social/post/3mywgbn2xfi2z"}, {"timestamp": "2026-10-28T09:30:07.728Z", "date_only": false, "value": "2026-10-28T09:30:07.728323Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mywguqefkr23", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "b7ae3b68-2ed6-47cb-80a9-c073e5d20d77", "content": "\ud83d\udce2 CVE-2026-97631 : faille critique d'ex\u00e9cution de code dans EDK2 affecte la majorit\u00e9 des serveurs mondiaux\n\nLa divulgation est qualifi\u00e9e de \u00ab botched \u00bb (rat\u00e9e) : AMI a publi\u00e9 pr\u00e9matur\u00e9ment un pull request contenant le correctif, rompant\u2026\n\n\ud83d\udfe2 v\u00e9rification factuelle haute\n#EDK2 #PXEBoot #Cyberveille", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mywguqefkr23"}, {"timestamp": "2026-10-28T11:23:29.346Z", "date_only": false, "value": "2026-10-28T11:23:29.346296Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/dastechno.com/post/3mywn7g72ag23", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "365ce53a-d9f0-4fd6-a592-32e93ca7fa6a", "content": "UEFI-L\u00fccke CVE-2026-97631: PXE-Boot gef\u00e4hrdet Server vor Secure Boot\n\nKritische L\u00fccke im EDK-II-Code (CVSS 9,5): Beim Netzwerkstart per PXE k\u00f6nnen Angreifer Code vor Secure Boot ausf\u00fchren. Betroffen sind vor allem Server, nicht Heim-PCs.\n\n#News", "url": "https://bsky.app/profile/dastechno.com/post/3mywn7g72ag23"}, {"timestamp": "2026-10-28T11:50:48.188Z", "date_only": false, "value": "2026-10-28T11:50:48.188235Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-ca4d3274-2d285fd4c6e74a22", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "54a565bc-a8bc-45a2-ba41-d5eda5bcba63", "content": "CVE-2026-97631: A 16-year-old UEFI flaw (CVSS score of 9.5/10) enables pre-OS code execution. Exposed servers need firmware patches and checks. A critical flaw, tracked as CVE-2026-97631 (CVSS score of 9.5), in the firmware that boots most of the world\u2019s servers is now public, and the patch details came out months early. The bug affects TianoCore [\u2026]CVE-2026-97631: 16-Year-Old UEFI Flaw Threatens Servers", "url": "https://poliverso.org/objects/0477a01e-ca4d3274-2d285fd4c6e74a22"}, {"timestamp": "2026-10-28T11:51:42.437Z", "date_only": false, "value": "2026-10-28T11:51:42.437379Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mywoqtl3psg2", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "c86cde68-7e91-44b0-af5f-d4f8c3e806c1", "content": "CVE-2026-97631: A 16-year-old UEFI flaw (CVSS score of 9.5/10) enables pre-OS code execution. Exposed servers need firmware patches and checks. A critical flaw, tracked as CVE-2026-97631 (CVSS score of 9.5), in the firmware that boots most of the world\u2019s servers is now public, and the patch [\u2026]", "url": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mywoqtl3psg2"}, {"timestamp": "2026-10-28T11:59:34Z", "date_only": false, "value": "2026-10-28T11:59:34.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/259224", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "8de9f2f3-8b92-4bd8-a665-db30461451d3", "content": "CVE-2026-97631: 16-Year-Old UEFI Flaw Threatens Servers\nhttps://ift.tt/vaeBsUp", "url": "https://t.me/ctinow/259224"}, {"timestamp": "2026-10-28T12:18:46Z", "date_only": false, "value": "2026-10-28T12:18:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/10491", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "93da44ed-c16e-4197-ac64-0cc1a513a89a", "content": "\u203c\ufe0f Critical 16-year-old flaw in EDK II UEFI firmware could let attackers execute code before Secure Boot checks.\n\nCVE-2026-97631 affects PXE network boot, requires local network access and target-specific exploitation.\n\nNo patched stable EDK II release yet.\n\nFull details \u2192 https://thehackernews.com/2026/10/critical-16-year-old-uefi-flaw-can-run.html", "url": "https://t.me/thehackernews/10491"}, {"timestamp": "2026-10-28T13:13:13.673Z", "date_only": false, "value": "2026-10-28T13:13:13.673963Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybactu.bsky.social/post/3mywtdnxxe72l", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "f33cfd41-180f-4e83-9f54-c9643928ecf1", "content": "CVE-2026-97631 : une faille critique dans le firmware UEFI EDK II menace de nombreux serveurs\n\n#cybersecurite #UEFI #EDKII", "url": "https://bsky.app/profile/cybactu.bsky.social/post/3mywtdnxxe72l"}, {"timestamp": "2026-10-28T13:35:35.908Z", "date_only": false, "value": "2026-10-28T13:35:35.908927Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mywulmw7x62i", "record": "cve-2026-97631", "field": "creation_timestamp", "uuid": "6ab0e6c4-b9e7-4875-8bf7-263bb57c806c", "content": "CVE-2026-97631: How a 16-Year-Old EDK II PXE Bug Exposes UEFI Firmware Before the OS\u00a0Loads\n\nCVE-2026-97631 is a CVSS 9.5 EDK II PXE flaw that lets a LAN attacker corrupt UEFI firmware before Secure Boot. Impact, root\u2026\n\nhttps://thecybersecguru.com/news/cve-2026-97631-edk2-pxe-uefi-vulnerability/", "url": "https://bsky.app/profile/thecybersecguru.com/post/3mywulmw7x62i"}, {"timestamp": "2026-10-28T14:06:46.002Z", "date_only": false, "value": "2026-10-28T14:06:46.002028Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mywwde5wua26", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "092a3e90-5302-431d-b17b-d5a0f434572d", "content": "A critical code-execution vulnerability, CVE-2026-97631, rated 9.5/10, affects UEFI firmware used by most server vendors.", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3mywwde5wua26"}, {"timestamp": "2026-10-28T14:18:49.239Z", "date_only": false, "value": "2026-10-28T14:18:49.239706Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/glonce.com/post/3mywwywuhq32a", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "a1bbfb35-fa39-440e-86cb-59c45556f73d", "content": "TianoCore EDK II UEFI flaw CVE-2026-97631 allows pre-boot code execution\nA 9.5-rated memory-corruption bug in an ICMP component of TianoCore EDK II, the open source base of most UEFI firmware, leaked early when an AMI pull request detailed it and its fix ahead of a planned January disclosure.", "url": "https://bsky.app/profile/glonce.com/post/3mywwywuhq32a"}, {"timestamp": "2026-10-28T14:30:42.279Z", "date_only": false, "value": "2026-10-28T14:30:42.279791Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/yasna.io/post/3mywxo7absp26", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "c6d9cb6d-139a-4fb9-8dfd-8039ce7d21d7", "content": "A critical 16-year-old UEFI firmware flaw (CVE-2026-97631) allows code execution before OS load on many servers, raising urgent patching needs.\n\n#Flaw #Firmware #infosec\n\nFull synthesis & sources: yasna.io", "url": "https://bsky.app/profile/yasna.io/post/3mywxo7absp26"}, {"timestamp": "2026-10-28T14:34:01.125Z", "date_only": false, "value": "2026-10-28T14:34:01.125804Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/ceugian4zcyen", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "c8713402-59ef-4a35-b422-0b0425f76c20", "content": "CVE-2026-97631: Pre-boot RCE in EDK II PXE driver", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/ceugian4zcyen"}, {"timestamp": "2026-10-28T14:42:04.066Z", "date_only": false, "value": "2026-10-28T14:42:04.066261Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybernewsph.com/post/3mywycikism2q", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "4268e6fb-09db-4914-856b-fcfe8ac94f18", "content": "\u201cThis vulnerability, tracked as CVE-2026-97631, affects ICMP error processing during both IPv4 and IPv6 network boot, which exposes the firmware memory to potential writes by attackers\u201d, GBHackers reports.\n\n#cybersecurity", "url": "https://bsky.app/profile/cybernewsph.com/post/3mywycikism2q"}, {"timestamp": "2026-10-28T14:54:16.217Z", "date_only": false, "value": "2026-10-28T14:54:16.217052Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mywyyddntl23", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "6d5d0f5a-cb33-4163-b715-2b2d454db0fd", "content": "A 16-Year-Old UEFI Firmware Flaw Exposes Servers to Pre-Boot Code Execution \u2014 CVE-2026-97631 Scores 95 +\u00a0Video\n\nA Critical Vulnerability Threatens the Foundation of Server Security A critical vulnerability in TianoCore EDK II, a widely used open-source framework for building UEFI firmware, has\u2026", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3mywyyddntl23"}, {"timestamp": "2026-10-28T15:01:25.418Z", "date_only": false, "value": "2026-10-28T15:01:25.418985Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/dacbarbos.eurosky.social/post/3mywzf43gds2b", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "61f2be0c-aec0-43fc-bf48-83f388c290c8", "content": "MT @thehackernews.bsky.social \nCritical 16-year-old flaw in EDK II UEFI firmware could let attackers execute code before Secure Boot checks.\n\nCVE-2026-97631\nNo patched stable EDK II release yet.\n\nFull details \u2192 thehackernews.com/2026/10/crit...", "url": "https://bsky.app/profile/dacbarbos.eurosky.social/post/3mywzf43gds2b"}, {"timestamp": "2026-10-28T15:01:53.322Z", "date_only": false, "value": "2026-10-28T15:01:53.322914Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mywzfy2sij2w", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "f6104469-2a97-4c03-b874-306c0d54def0", "content": "\ud83e\udd16 CVE-2026-97631 (9.5): EDK II PXE boot buffer overflow. One ICMP error msg >504 bytes, no auth needed, lands code before Secure Boot. Fix merged, no stable release yet.\nhttps://thehackernews.com/2026/10/critical-16-year-old-uefi-flaw-can-run.html", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mywzfy2sij2w"}, {"timestamp": "2026-10-28T15:26:58.975Z", "date_only": false, "value": "2026-10-28T15:26:58.975422Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hn-frontpage-bot.bsky.social/post/3myx2stffij2q", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "357ba884-7f2d-4e00-bfd3-f5ba56465323", "content": "A critical buffer overflow vulnerability, CVE-2026-97631, has been discovered in the TianoCore EDK2 firmware's PXE boot component. It allows attackers to execute code during the boot process, bypassing security measures on network-booting servers.", "url": "https://bsky.app/profile/hn-frontpage-bot.bsky.social/post/3myx2stffij2q"}, {"timestamp": "2026-10-28T16:01:11.846Z", "date_only": false, "value": "2026-10-28T16:01:11.846140Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nullrend.com/post/3myx4pydsy2vm", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "b886f6e0-f731-4d17-9fd0-5f409fe375f9", "content": "CVE-2026-97631\n\nwell, shit", "url": "https://bsky.app/profile/nullrend.com/post/3myx4pydsy2vm"}, {"timestamp": "2026-10-28T16:03:33.944Z", "date_only": false, "value": "2026-10-28T16:03:33.944956Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3myx4uafs3o2s", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "6bca0020-cf8b-41c4-b3d6-42e1a4da1a73", "content": "EDK2 PXE Flaw (CVE-2026-97631): Find What You Run", "url": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3myx4uafs3o2s"}, {"timestamp": "2026-10-28T16:06:34.929Z", "date_only": false, "value": "2026-10-28T16:06:34.929Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-97631", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-28T16:06:34.929Z", "date_only": false, "value": "2026-10-28T16:06:34.929Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2026-97631", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-28T16:10:03.569Z", "date_only": false, "value": "2026-10-28T16:10:03.569877Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117519404414707213", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "3f6a0f20-8b1f-4a32-b5a1-2ea6ae39457a", "content": "\ud83d\udea8\ud83c\uddfa\ud83c\uddf8 Critical 16-year-old EDK II flaw enables code execution before Secure Boot\nA critical buffer overflow in TianoCore EDK II, the open-source foundation used to build much of the world\u2019s UEFI firmware, can allow an unauthenticated attacker to run code before the operating system loads.\nTracked as CVE-2026-97631, the vulnerability carries a CVSS score of 9.5 and has existed in the code since November 2010.\u2800The flaw resides in the PXE network-boot driver, which copies incoming ICMP error messages into a fixed 504-byte buffer without properly limiting their size.\u2800An attacker who can reach a machine while it is booting over the network can send a crafted ICMP message that:\n\u2022 Crashes the firmware and prevents the operating system from loading\u2022 Executes attacker-controlled code in the pre-boot environment\u2022 Runs before Secure Boot and measured-boot protections evaluate the operating system\u2800Reliable code execution requires knowledge of the target\u2019s firmware build. Systems that boot exclusively from local storage are not exposed through this attack path.\u2800An upstream fix was merged into EDK II on October 15, but no stable EDK II release currently includes it. Server and motherboard vendors must integrate the patch and distribute BIOS or UEFI updates to customers.\nSource: https://github.com/tianocore/edk2/security/advisories/GHSA-99cj-7hg9-mp4m", "url": "https://infosec.exchange/users/DarkWebInformer/statuses/117519404414707213"}, {"timestamp": "2026-10-28T17:14:11.191Z", "date_only": false, "value": "2026-10-28T17:14:11.191671Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/racc.at/post/3myxasjl3pm22", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "3719a793-8744-42f1-b09b-0ed461e82e5d", "content": "CVE-2026-97631", "url": "https://bsky.app/profile/racc.at/post/3myxasjl3pm22"}, {"timestamp": "2026-10-28T17:35:56Z", "date_only": false, "value": "2026-10-28T17:35:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/xakep_ru/20292", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "f04b63cf-ddd8-4ed7-baf1-b2108e60df99", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 UEFI \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0440\u0430\u043d\u044c\u0448\u0435 \u0441\u0440\u043e\u043a\u0430\n\n\u0412 TianoCore EDK II (EDK2) \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-97631 (9,5 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0435\u0449\u0435 \u0434\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u041e\u0421 \u0438 \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0445 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0432\u0440\u043e\u0434\u0435 Secure Boot. \u0422\u0430\u043a \u043a\u0430\u043a EDK2 \u043b\u0435\u0436\u0438\u0442 \u0432 \u043e\u0441\u043d\u043e\u0432\u0435 UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0433\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u043c\u0430\u0441\u0448\u0442\u0430\u0431 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432\u0435\u043b\u0438\u043a. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u043d\u044c\u0448\u0435 \u0437\u0430\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u0440\u043e\u043a\u0430 \u0438\u0437-\u0437\u0430 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0430\u0442\u0447\u0430.\n\nhttps://xakep.ru/2026/10/28/edk2-flaw/", "url": "https://t.me/xakep_ru/20292", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-28T17:35:56Z", "date_only": false, "value": "2026-10-28T17:35:56.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/xakep_ru/20292", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "d53bca9b-ec27-44e5-89a3-b55f0230dd56", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 UEFI \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0440\u0430\u043d\u044c\u0448\u0435 \u0441\u0440\u043e\u043a\u0430\n\n\u0412 TianoCore EDK II (EDK2) \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-97631 (9,5 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0435\u0449\u0435 \u0434\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u041e\u0421 \u0438 \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0445 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0432\u0440\u043e\u0434\u0435 Secure Boot. \u0422\u0430\u043a \u043a\u0430\u043a EDK2 \u043b\u0435\u0436\u0438\u0442 \u0432 \u043e\u0441\u043d\u043e\u0432\u0435 UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0433\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u043c\u0430\u0441\u0448\u0442\u0430\u0431 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432\u0435\u043b\u0438\u043a. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u043d\u044c\u0448\u0435 \u0437\u0430\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u0440\u043e\u043a\u0430 \u0438\u0437-\u0437\u0430 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0430\u0442\u0447\u0430.\n\nhttps://xakep.ru/2026/10/28/edk2-flaw/", "url": "https://t.me/xakep_ru/20292"}, {"timestamp": "2026-10-28T17:47:08Z", "date_only": false, "value": "2026-10-28T17:47:08Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-97631", "record": "UBUNTU-CVE-2026-97631", "field": "modified"}, {"timestamp": "2026-10-28T18:00:33.959Z", "date_only": false, "value": "2026-10-28T18:00:33.959852Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3myxdfh6s3d2a", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "400dccdd-0609-4ba1-bc0e-0fdcea1ef26b", "content": "\ud83d\udc7b\ud83d\udc40 Un paquet #ICMP\u2026 et le code s\u2019ex\u00e9cute avant m\u00eame le Secure Boot\n\nC'est le sc\u00e9nario d'attaque associ\u00e9 \u00e0 la faille CVE-2026-97631, d\u00e9couverte dans un code #UEFI par deux chercheurs d' #Anthropic et de #Google \ud83d\udd0d\n\nwww.it-connect.fr/faille-uefi-...", "url": "https://bsky.app/profile/it-connect.bsky.social/post/3myxdfh6s3d2a"}, {"timestamp": "2026-10-28T18:15:28.662Z", "date_only": false, "value": "2026-10-28T18:15:28.662770Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3myxea4nfn22u", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "787a2465-d018-4168-bdb4-d10332394cf3", "content": "\ud83d\udee1\ufe0f Most-discussed CVEs on Bluesky, last 24h\n\n1. CVE-2026-111497 \u00b7 46 people \ud83d\udd25\n2. CVE-2026-109618 \u00b7 33 people \ud83d\udd25\n3. CVE-2026-97631 \u00b7 32 people\n4. CVE-2026-109619 \u00b7 26 people \ud83d\udd25\n5. CVE-2026-48356 \u00b7 15 people \ud83d\udd25\n\n\ud83d\udd25 = on CISA's Known Exploited list \u00b7 details in the thread \ud83e\uddf5", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3myxea4nfn22u"}, {"timestamp": "2026-10-28T18:15:30.027Z", "date_only": false, "value": "2026-10-28T18:15:30.027225Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3myxea4zeh22u", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "5eefefe5-6e5b-419d-bd91-e54757a9fd6c", "content": "3. CVE-2026-97631 \u00b7 32 people\n\ud83d\udfe5 Critical 9.5 \u00b7 TianoCore EDK2\n\nPre-boot RCE in EDK II PXE driver", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3myxea4zeh22u"}, {"timestamp": "2026-10-28T19:03:00.750Z", "date_only": false, "value": "2026-10-28T19:03:00.750657Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technotenshi.bsky.social/post/3myxguz2m3c2k", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "b3b531e2-7e2a-4986-964a-72e984557829", "content": "AMI published a fix before planned disclosure, Ars reports. CVE-2026-97631 allows code execution during EDK II PXE boot. Check vendor guidance.\n\narstechnica.com/security/202...\n\n#UEFI #Firmware #Cybersecurity", "url": "https://bsky.app/profile/technotenshi.bsky.social/post/3myxguz2m3c2k"}, {"timestamp": "2026-10-28T19:12:18.218Z", "date_only": false, "value": "2026-10-28T19:12:18.218936Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3myxhfq5esg2d", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "9194b7da-de21-4efb-903b-1ac88315f865", "content": "CVE-2026-97631 is a buffer overflow in EDK II PXE network-boot code that can crash or, with build-specific exploitation, run code before Secure Boot. A fix is merged but not yet in a stable release; no exploitation is known.", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3myxhfq5esg2d"}, {"timestamp": "2026-10-28T20:38:32.233Z", "date_only": false, "value": "2026-10-28T20:38:32.233300Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/internoticies.pongo.cat/post/3myxm7wyt6225", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "c8171c55-0ef1-4354-8fb0-241198036f92", "content": "Una vulnerabilitat cr\u00edtica (CVE-2026-97631) amb una puntuaci\u00f3 de 9,5 sobre 10 afecta el firmware UEFI basat en TianoCore EDK II, utilitzat per la gran majoria de servidors i centres de dades del m\u00f3n.", "url": "https://bsky.app/profile/internoticies.pongo.cat/post/3myxm7wyt6225"}, {"timestamp": "2026-10-28T20:42:33.910Z", "date_only": false, "value": "2026-10-28T20:42:33.910716Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3myxmh4x3qt2b", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "77b7ac83-81bf-4789-903e-541557911533", "content": "CVE-2026-97631 in TianoCore EDK II enables pre-OS malicious code execution via an ICMP memory-corruption flaw with severity 9.5/10.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3myxmh4x3qt2b"}, {"timestamp": "2026-10-28T20:43:32.790Z", "date_only": false, "value": "2026-10-28T20:43:32.790897Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3myxmiu4jih26", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "6fac381f-b9c9-4f3a-a3d0-209109b9b63d", "content": "CVE-2026-97631 in TianoCore EDK II enables pre-OS malicious code execution via an ICMP memory-corruption flaw with severity 9.5/10.\n", "url": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3myxmiu4jih26"}, {"timestamp": "2026-10-28T22:58:55.626Z", "date_only": false, "value": "2026-10-28T22:58:55.626449Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xenospectrum.com/post/3myxu2xmsra26", "record": "cve-2026-97631", "field": "creation_timestamp", "uuid": "1b5721c7-f2e6-48d3-b3fe-f220acfe7419", "content": "OS\u8d77\u52d5\u524d\u306b\u4e57\u3063\u53d6\u3089\u308c\u308b\u6050\u308c\u3001UEFI\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u767a\u899a\uff1a\u4fee\u6b63\u30b3\u30fc\u30c9\u306f\u516c\u886824\u65e5\u524d\u304b\u3089\u516c\u958b\u3055\u308c\u3066\u3044\u305f\n\nhttps://xenospectrum.com/edk2-pxe-icmp-cve-2026-97631/", "url": "https://bsky.app/profile/xenospectrum.com/post/3myxu2xmsra26"}, {"timestamp": "2026-10-28T23:57:17.030Z", "date_only": false, "value": "2026-10-28T23:57:17.030858Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aitechmatome-eng.bsky.social/post/3myxxdcyo2j2l", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "2a5b0c73-6507-433c-995e-399c3571fbc7", "content": "A critical code execution vulnerability has been discovered in open-source UEFI firmware code used by server vendors and data centers worldwide. Tracked as CVE-2026-97631, this memory corruption flaw originates from a 16-year-old buffer overflow in a network driver. It allows attackers ...", "url": "https://bsky.app/profile/aitechmatome-eng.bsky.social/post/3myxxdcyo2j2l"}, {"timestamp": "2026-10-29T00:41:04.293Z", "date_only": false, "value": "2026-10-29T00:41:04.293715Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3myxzrlbf3t22", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "07863fbc-0d46-4010-908e-1d1012324fec", "content": "Patch CVE-2026-97631 now. This critical 9.5 CVSS EDK II PXE vulnerability allows unauthenticated pre-boot RCE via crafted ICMP error packets.\n\n#EDKII #TianoCore #UEFI #PXEBoot #CVE202697631 #Cybersecurity #Vulnerability #InfoSec #13302", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3myxzrlbf3t22"}, {"timestamp": "2026-10-29T01:28:19.746Z", "date_only": false, "value": "2026-10-29T01:28:19.746071Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/trustlist.bsky.social/post/3myy4g4v2tl2r", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "7ad6a388-5936-48af-ac1c-68348876897a", "content": "Security advisories 28/29\nEDK II flaw lets a network attacker run code while a server PXE-boots\n\nCVE-2026-97631, rated CVSS 9.5, sits in the open-source UEFI network stack that most PC and server firmware builds on.\n\n#infosec #cybersecurity\ntrustlist.uk/security-advisorie\u2026", "url": "https://bsky.app/profile/trustlist.bsky.social/post/3myy4g4v2tl2r"}, {"timestamp": "2026-10-29T01:41:42.648Z", "date_only": false, "value": "2026-10-29T01:41:42.648754Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3myy55yw6pl23", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "e9098d2b-8670-412f-8791-d328b5c3d06d", "content": "CVE-2026-97631: EDK II PXE Buffer Overflow Raises Concerns About Pre\u2013Secure Boot Code Execution +\u00a0Video\n\nA Firmware-Level Vulnerability Could Threaten Systems Before the Operating System Starts A newly reported vulnerability in EDK II, the widely used open-source firmware development project,\u2026", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3myy55yw6pl23"}, {"timestamp": "2026-10-29T02:00:08Z", "date_only": false, "value": "2026-10-29T02:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/107862", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "625fcc07-193e-48ce-a31f-14609eda8307", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-97631-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Try2Take\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-29 01:35:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/107862", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-29T02:41:56.361Z", "date_only": false, "value": "2026-10-29T02:41:56.361383Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cdn0x12.scg.owu.one/post/3myyajjhz4jy2", "record": "cve-2026-97631", "field": "creation_timestamp", "uuid": "b8271fcd-b4c3-436b-a927-b3fdc1f4128c", "content": "TianoCore EDK II \u9ad8\u5371\u6f0f\u6d1e\uff0c\u53ef\u5728 Pre-OS\u9636\u6bb5\u88ab\u901a\u8fc7\u53d1\u9001\u6076\u610ficmp\u5305\u7684\u65b9\u5f0f\u52ab\u6301\u548cRCE\n\nhttps://nvd.nist.gov/vuln/detail/cve-2026-97631", "url": "https://bsky.app/profile/cdn0x12.scg.owu.one/post/3myyajjhz4jy2"}, {"timestamp": "2026-10-29T03:12:24.536Z", "date_only": false, "value": "2026-10-29T03:12:24.536139Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sansisc.bsky.social/post/3myycaaugh72t", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "1e6d9a92-e5ac-47f9-b700-ed1e6bc3eb9e", "content": "SANS Stormcast Thursday, October 29th, 2026: ClickFix Campaign Targets macOS and Windows; EDK II UEFI PXE Pre-Boot RCE (CVE-2026-97631); Qwen AI Model Data Exfiltration; LiteLLM Master Key Leak\n https://isc.sans.edu/podcastdetail/10156", "url": "https://bsky.app/profile/sansisc.bsky.social/post/3myycaaugh72t"}, {"timestamp": "2026-10-29T08:11:06.726Z", "date_only": false, "value": "2026-10-29T08:11:06.726669Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3myyswejvp52p", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "71ce4109-dfd5-481d-971c-5e019f08fd67", "content": "Vuln\u00e9rabilit\u00e9s critiques (CVSS \u2265 9) \u00b7 4\n\u2022 Oracle E-Business Suite (CVE-2026-101767), CVSS 9.8 (Hacktualit\u00e9s)\n\u2022 Firmware UEFI (EDK II) (CVE-2026-97631), CVSS 9.5 (IT-Connect)\n\u2022 Veeam Backup & Replication 13 (CVE-2026-108142), CVSS 9.1 (Cyberveille Esant\u00e9)", "url": "https://bsky.app/profile/cybowl.bsky.social/post/3myyswejvp52p"}, {"timestamp": "2026-10-29T09:37:26.297Z", "date_only": false, "value": "2026-10-29T09:37:26.297359Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3myyxqpgf5c2r", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "69f2d520-f3aa-4aff-afc6-536243620273", "content": "CVE-2026-97631: 16-Year-Old UEFI Flaw Threatens Servers\n\nCVE-2026-97631: A 16-year-old UEFI flaw (CVSS score of 9.5/10) enables pre-OS code execution. Exposed servers need firmware patches and checks. A critical flaw, tracked as CVE-2026-97631 (CVSS score of 9.5), in the firmware \u2026\n#hackernews #news", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3myyxqpgf5c2r"}, {"timestamp": "2026-10-29T14:41:51.845Z", "date_only": false, "value": "2026-10-29T14:41:51.845822Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/axnews.bsky.social/post/3myziqz6yrj26", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "0bc5967d-d456-4fac-95cf-7322fb8f395b", "content": "\ud83d\udea8 Breaking: CVE-2026-97631 \u2014 Critical 9.5\nImpacted if: TianoCore EDK2 \u2264 edk2-stable202608\nMemory corruption \u00b7 over the network \u00b7 no login\nhttps://ax-news.com/cve/CVE-2026-97631\n#CVE #infosec", "url": "https://bsky.app/profile/axnews.bsky.social/post/3myziqz6yrj26"}, {"timestamp": "2026-10-29T15:30:17.815Z", "date_only": false, "value": "2026-10-29T15:30:17.815358Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/duonggiakhanh.com/post/3myzlhobmmy2c", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "cc818049-c1a0-4484-abb6-533b27cd1571", "content": "\ud83d\udc80 A 2010-era buffer overflow in EDK II's PXE network-boot code (CVE-2026-97631, CVSS 9.5) can run code before Secure Boot. Attacker needs the local network, no exploitation seen yet. Don't need PXE? Turn it off. #cybersecurity #netsec", "url": "https://bsky.app/profile/duonggiakhanh.com/post/3myzlhobmmy2c"}, {"timestamp": "2026-10-29T19:13:46.509Z", "date_only": false, "value": "2026-10-29T19:13:46.509928Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threatroundup.bsky.social/post/3myzxxcfgih2j", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "20f11da6-00e0-4c5a-b67b-cdec6f830559", "content": "A buffer overflow in UEFI network-boot code, there since 2010, can let someone on your LAN run code before Secure Boot. CVE-2026-97631 is rated 9.5; firmware updates are still coming.\n\nthreatroundup.com/news/edk2-px...", "url": "https://bsky.app/profile/threatroundup.bsky.social/post/3myzxxcfgih2j"}], "metrics": {"as_of": "2026-10-29T20:54:33.080Z", "anchors": {"origin": {"timestamp": "2026-10-22T16:32:00Z", "date_only": false, "value": "2026-10-22T16:32:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / TianoCore", "record": "CVE-2026-97631", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-22T16:32:00Z", "date_only": false, "value": "2026-10-22T16:32:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / TianoCore", "record": "CVE-2026-97631", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-10-28T17:35:56Z", "date_only": false, "value": "2026-10-28T17:35:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/xakep_ru/20292", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "f04b63cf-ddd8-4ed7-baf1-b2108e60df99", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 UEFI \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0440\u0430\u043d\u044c\u0448\u0435 \u0441\u0440\u043e\u043a\u0430\n\n\u0412 TianoCore EDK II (EDK2) \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-97631 (9,5 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0435\u0449\u0435 \u0434\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u041e\u0421 \u0438 \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0445 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0432\u0440\u043e\u0434\u0435 Secure Boot. \u0422\u0430\u043a \u043a\u0430\u043a EDK2 \u043b\u0435\u0436\u0438\u0442 \u0432 \u043e\u0441\u043d\u043e\u0432\u0435 UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0433\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u043c\u0430\u0441\u0448\u0442\u0430\u0431 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432\u0435\u043b\u0438\u043a. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u043d\u044c\u0448\u0435 \u0437\u0430\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u0440\u043e\u043a\u0430 \u0438\u0437-\u0437\u0430 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0430\u0442\u0447\u0430.\n\nhttps://xakep.ru/2026/10/28/edk2-flaw/", "url": "https://t.me/xakep_ru/20292", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 522236.0, "hours": 145.06555555555556, "days": 6.044398148148148, "min_seconds": 522236.0, "max_seconds": 522236.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-22T16:32:00Z", "date_only": false, "value": "2026-10-22T16:32:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / TianoCore", "record": "CVE-2026-97631", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-28T17:35:56Z", "date_only": false, "value": "2026-10-28T17:35:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/xakep_ru/20292", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "f04b63cf-ddd8-4ed7-baf1-b2108e60df99", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 UEFI \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0440\u0430\u043d\u044c\u0448\u0435 \u0441\u0440\u043e\u043a\u0430\n\n\u0412 TianoCore EDK II (EDK2) \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-97631 (9,5 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0435\u0449\u0435 \u0434\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u041e\u0421 \u0438 \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0445 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0432\u0440\u043e\u0434\u0435 Secure Boot. \u0422\u0430\u043a \u043a\u0430\u043a EDK2 \u043b\u0435\u0436\u0438\u0442 \u0432 \u043e\u0441\u043d\u043e\u0432\u0435 UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0433\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u043c\u0430\u0441\u0448\u0442\u0430\u0431 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432\u0435\u043b\u0438\u043a. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u043d\u044c\u0448\u0435 \u0437\u0430\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u0440\u043e\u043a\u0430 \u0438\u0437-\u0437\u0430 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0430\u0442\u0447\u0430.\n\nhttps://xakep.ru/2026/10/28/edk2-flaw/", "url": "https://t.me/xakep_ru/20292", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 620553.080433, "hours": 172.37585567583332, "days": 7.182327319826389, "min_seconds": 620553.080433, "max_seconds": 620553.080433, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-22T16:32:00Z", "date_only": false, "value": "2026-10-22T16:32:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / TianoCore", "record": "CVE-2026-97631", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-29T20:54:33.080Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 98317.080433, "hours": 27.310300120277777, "days": 1.1379291716782407, "min_seconds": 98317.080433, "max_seconds": 98317.080433, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-28T17:35:56Z", "date_only": false, "value": "2026-10-28T17:35:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/xakep_ru/20292", "record": "CVE-2026-97631", "field": "creation_timestamp", "uuid": "f04b63cf-ddd8-4ed7-baf1-b2108e60df99", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 UEFI \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0440\u0430\u043d\u044c\u0448\u0435 \u0441\u0440\u043e\u043a\u0430\n\n\u0412 TianoCore EDK II (EDK2) \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-97631 (9,5 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0435\u0449\u0435 \u0434\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u041e\u0421 \u0438 \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0445 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0432\u0440\u043e\u0434\u0435 Secure Boot. \u0422\u0430\u043a \u043a\u0430\u043a EDK2 \u043b\u0435\u0436\u0438\u0442 \u0432 \u043e\u0441\u043d\u043e\u0432\u0435 UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0433\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u043c\u0430\u0441\u0448\u0442\u0430\u0431 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432\u0435\u043b\u0438\u043a. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u043d\u044c\u0448\u0435 \u0437\u0430\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u0440\u043e\u043a\u0430 \u0438\u0437-\u0437\u0430 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0430\u0442\u0447\u0430.\n\nhttps://xakep.ru/2026/10/28/edk2-flaw/", "url": "https://t.me/xakep_ru/20292", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-29T20:54:33.080Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}