# UEFI firmware code-execution flaw threatens servers worldwide

https://mins.news/en/item/118092

- Ars Technica, 2026-10-27 20:25 UTC
- Tech
- Original: https://arstechnica.com/security/2026/10/code-execution-flaw-in-uefi-firmware-threatens-most-servers-on-planet-earth/

> A memory-corruption flaw rated 9.5 out of 10 affects an ICMP component in TianoCore EDK II, code widely used by hardware makers and cloud providers to build UEFI firmware. Attackers could exploit it to run malicious code before the operating system and defenses such as Secure Boot start.