# Hetzner: Incident updated: CVE-2026-97631 - critical security vulnerability in the EDK II UEFI firmware component

> Incident updated: CVE-2026-97631 - critical security vulnerability in the EDK II UEFI firmware component. Detected 2026-10-29 by Rewindex: what changed on Hetzner’s status page, with the before/after diff.

Canonical: https://rewindex.com/change/r49bf1247b43caa
Last updated: 2026-10-29T12:43:03Z

**Summary:** _summary pending_
- Kind: Incident update · Label: Normal progress (rule)
- Changed: 2026-10-29 12:43 UTC · Detected: 2026-10-29 12:43 UTC
- [Source: https://status.hetzner.com/incident/54493dac-b3a2-44f0-8d8b-6de8b25d8f17](https://status.hetzner.com/incident/54493dac-b3a2-44f0-8d8b-6de8b25d8f17)
- [Company: Hetzner](https://rewindex.com/company/hetzner.md)
- Versions: before incident\_version:85/54493dac-b3a2-44f0-8d8b-6de8b25d8f17@9b7c9d9fb99c → after incident\_version:85/54493dac-b3a2-44f0-8d8b-6de8b25d8f17@3f70fe89d679
- Change 2 of 5 for this incident

Incident page (full timeline): [CVE-2026-97631 - critical security vulnerability in the EDK II UEFI firmware component](https://rewindex.com/company/hetzner/incidents/54493dac-b3a2-44f0-8d8b-6de8b25d8f17.md)
## What changed

**1. Added: Update** (investigating) · 2026-10-29 12:34 UTC

```diff
+ What is affected? Dedicated Servers (bare-metal servers) and Cloud VMs running with UEFI. On Linux, you can check this with the following command: [ -d /sys/firmware/efi ] && echo UEFI || echo BIOS What do we recommend? A running system is not directly at risk. For Dedicated Servers, the risk only exists during a reboot. For Cloud VMs, the risk only exists when booting into the Rescue System. If possible, avoid these boot processes until a solution is available. As an additional security measure, you can temporarily block incoming ICMP packets using the Hetzner Firewall during reboots: Dedicated Servers (https://docs.hetzner.com/robot/dedicated-server/firewall/): Please make sure to enable “Allow Hetzner Services” when creating the firewall rules. Cloud Servers: https://docs.hetzner.com/cloud/firewalls/getting-started/creating-a-firewall/ What happens next? We are working on further recommendations and additional security measures. We will inform you as soon as we have new information or updates.
```

## History of this incident

| When (UTC) | Change | Label |
| --- | --- | --- |
| 2026-10-29 11:53 UTC | [Incident updated: CVE-2026-97631 - critical security vulnerability in the EDK II UEFI firmware component](https://rewindex.com/change/rd6e4d86fd32334.md) | Normal progress |
| 2026-10-29 12:43 UTC | Incident updated: CVE-2026-97631 - critical security vulnerability in the EDK II UEFI firmware component (this change) | Normal progress |
| 2026-10-30 16:13 UTC | [Incident updated: CVE-2026-97631 - critical security vulnerability in the EDK II UEFI firmware component](https://rewindex.com/change/r93eb85d76d530d.md) | Normal progress |
| 2026-11-02 13:13 UTC | [Incident updated: CVE-2026-97631 - critical security vulnerability in the EDK II UEFI firmware component](https://rewindex.com/change/r0b67f246d04dcd.md) | Normal progress |
| 2026-11-03 10:03 UTC | [Incident updated: CVE-2026-97631 - critical security vulnerability in the EDK II UEFI firmware component](https://rewindex.com/change/r10115fbf4bb414.md) | Normal progress |

Previous: [change](https://rewindex.com/change/rd6e4d86fd32334.md) · Next: [change](https://rewindex.com/change/r93eb85d76d530d.md) · All Hetzner changes: [timeline](https://rewindex.com/company/hetzner/changes.md)
_Diff excerpts are shown on normalized text: dates, counters and tokens appear as ‹date›, ‹count›, ‹tok›; noise-only edits are hidden. Rewindex shows the changed passages, not a copy of the page._

## Cite this

Incident updated: CVE-2026-97631 - critical security vulnerability in the EDK II UEFI firmware component on Hetzner’s status page, changed 2026-10-29 12:43 UTC (change 2 of 5).

- Canonical URL: https://rewindex.com/change/r49bf1247b43caa
- Citation: Hetzner, “Incident updated: CVE-2026-97631 - critical security vulnerability in the EDK II UEFI firmware component” (2026-10-29 12:43 UTC). Archived by Rewindex: https://rewindex.com/change/r49bf1247b43caa (CC BY 4.0).
- Markdown link: `[Hetzner: Incident updated: CVE-2026-97631 - critical security vulnerability in the EDK II UEFI firmware component (2026-10-29)](https://rewindex.com/change/r49bf1247b43caa)`


---
Canonical: https://rewindex.com/change/r49bf1247b43caa · Markdown: https://rewindex.com/change/r49bf1247b43caa.md · JSON: https://rewindex.com/api/v1/changes/r49bf1247b43caa · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T13:38:54.924Z