cybercrime.clubhttps://cybercrime.club/tags/network-boot/Infrastructure security news for people who build infrastructure.Hugo -- gohugo.ioen-usSat, 31 Oct 2026 23:03:20 -0400EDK II PXE Flaw (CVE-2026-97631): One Oversized ICMP Error Corrupts Server Firmware Before the OS Loadshttps://cybercrime.club/posts/edk2-pxe-cve-2026-97631-icmp-overflow-preboot-rce/Sat, 31 Oct 2026 23:03:20 -0400https://cybercrime.club/posts/edk2-pxe-cve-2026-97631-icmp-overflow-preboot-rce/A CVSS 9.5 buffer overflow in TianoCore EDK II's PXE driver lets an unauthenticated network attacker corrupt memory in the DXE phase of a booting server, ahead of Secure Boot and any OS controls.vulnerabilities