EDK II UEFI flaw rated 9.5/10 severity

CVE-2026-97631, a buffer overflow in the network-boot driver, lets a local-network attacker run code before Secure Boot loads. Fix code went public ahead of a January disclosure date.