news
The Hacker News
October 28th, 2026 at 11:50 AMCritical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers
A critical 16-year-old flaw in EDK II, the open-source code that most hardware makers use to build UEFI firmware, can allow an attacker to run code on a machine before its operating system loads, but only while the machine is booting over the network. UEFI firmware is the software that runs first when a computer is switched on, before the operating system. An attacker who can reach the machine
Get stories like this every Monday
The week's most important AI news in one email. Free, unsubscribe anytime.
Score: 2.51
Engagement proxy: 0
Canonical link: https://thehackernews.com/2026/10/critical-16-year-old-uefi-flaw-can-run.html