# Critical 16-Year-Old UEFI Flaw Allows Pre-Secure Boot Code Execution

A critical UEFI vulnerability that went undetected for 16 years can run code before Secure Boot on servers that boot from the network. The flaw could let attackers bypass a key firmware security control on affected network-booting servers, making patching urgent.

**Importance:** 4/5

## Sources

### Security
- [The Hacker News](https://thehackernews.com/2026/10/critical-16-year-old-uefi-flaw-can-run.html) — Wed, 28 Oct 2026 17:20:00 +0530