# Hetzner: Incident updated: CVE-2026-97631 - critical security vulnerability in the EDK II UEFI firmware component

> Incident updated: CVE-2026-97631 - critical security vulnerability in the EDK II UEFI firmware component. Detected 2026-10-30 by Rewindex: what changed on Hetzner’s status page, with the before/after diff.

Canonical: https://rewindex.com/change/r93eb85d76d530d
Last updated: 2026-10-30T16:13:04Z

**Summary:** _summary pending_
- Kind: Incident update · Label: Normal progress (rule)
- Changed: 2026-10-30 16:13 UTC · Detected: 2026-10-30 16:13 UTC
- [Source: https://status.hetzner.com/incident/54493dac-b3a2-44f0-8d8b-6de8b25d8f17](https://status.hetzner.com/incident/54493dac-b3a2-44f0-8d8b-6de8b25d8f17)
- [Company: Hetzner](https://rewindex.com/company/hetzner.md)
- Versions: before incident\_version:85/54493dac-b3a2-44f0-8d8b-6de8b25d8f17@3f70fe89d679 → after incident\_version:85/54493dac-b3a2-44f0-8d8b-6de8b25d8f17@327fef7fbe9b
- Change 3 of 5 for this incident

Incident page (full timeline): [CVE-2026-97631 - critical security vulnerability in the EDK II UEFI firmware component](https://rewindex.com/company/hetzner/incidents/54493dac-b3a2-44f0-8d8b-6de8b25d8f17.md)
## What changed

**1. Added: Update** (investigating) · 2026-10-29 12:34 UTC

```diff
+ What is affected? Dedicated Servers (bare-metal servers) and Cloud VMs running with UEFI. On Linux, you can check this with the following command: [ -d /sys/firmware/efi ] && echo UEFI || echo BIOS What do we recommend? A running system is not directly at risk. For Dedicated Servers, the risk only exists during a reboot. For Cloud VMs, the risk only exists when booting into the Rescue System. If possible, avoid these boot processes until a solution is available. As an additional security measure, you can temporarily block incoming ICMP packets using the Hetzner Firewall during reboots: Dedicated Servers (https://docs.hetzner.com/robot/dedicated-server/firewall/): Please make sure to enable “Allow Hetzner Services” when creating the firewall rules. Cloud Servers: https://docs.hetzner.com/cloud/firewalls/getting-started/creating-a-firewall/ What happens next? We are working on further recommendations and additional security measures. We will inform you as soon as we have new information or updates.
```

**2. Added: Update** (investigating) · 2026-10-30 16:07 UTC

```diff
+ We're implementing filters in our network, which will drop fragmented ICMPv4 packets, as well as ICMPv4 errors larger than 768 bytes. In particular: Any IPv4 packet with protocol ICMP and the "More Fragments (MF)" flag or non-zero "Fragment Offset" will be dropped. We will also drop any ICMPv4 packets that are of type 3 (Destination Unreachable), 4 (Source Quench), 5 (Redirect), 11 (Time Exceeded), or 12 (Parameter Problem), when their IPv4 header has a "Total Length" >= 768 bytes. Our previous recommendations on how to protect your systems still apply.
```

## History of this incident

| When (UTC) | Change | Label |
| --- | --- | --- |
| 2026-10-29 11:53 UTC | [Incident updated: CVE-2026-97631 - critical security vulnerability in the EDK II UEFI firmware component](https://rewindex.com/change/rd6e4d86fd32334.md) | Normal progress |
| 2026-10-29 12:43 UTC | [Incident updated: CVE-2026-97631 - critical security vulnerability in the EDK II UEFI firmware component](https://rewindex.com/change/r49bf1247b43caa.md) | Normal progress |
| 2026-10-30 16:13 UTC | Incident updated: CVE-2026-97631 - critical security vulnerability in the EDK II UEFI firmware component (this change) | Normal progress |
| 2026-11-02 13:13 UTC | [Incident updated: CVE-2026-97631 - critical security vulnerability in the EDK II UEFI firmware component](https://rewindex.com/change/r0b67f246d04dcd.md) | Normal progress |
| 2026-11-03 10:03 UTC | [Incident updated: CVE-2026-97631 - critical security vulnerability in the EDK II UEFI firmware component](https://rewindex.com/change/r10115fbf4bb414.md) | Normal progress |

Previous: [change](https://rewindex.com/change/r49bf1247b43caa.md) · Next: [change](https://rewindex.com/change/r0b67f246d04dcd.md) · All Hetzner changes: [timeline](https://rewindex.com/company/hetzner/changes.md)
_Diff excerpts are shown on normalized text: dates, counters and tokens appear as ‹date›, ‹count›, ‹tok›; noise-only edits are hidden. Rewindex shows the changed passages, not a copy of the page._

## Cite this

Incident updated: CVE-2026-97631 - critical security vulnerability in the EDK II UEFI firmware component on Hetzner’s status page, changed 2026-10-30 16:13 UTC (change 3 of 5).

- Canonical URL: https://rewindex.com/change/r93eb85d76d530d
- Citation: Hetzner, “Incident updated: CVE-2026-97631 - critical security vulnerability in the EDK II UEFI firmware component” (2026-10-30 16:13 UTC). Archived by Rewindex: https://rewindex.com/change/r93eb85d76d530d (CC BY 4.0).
- Markdown link: `[Hetzner: Incident updated: CVE-2026-97631 - critical security vulnerability in the EDK II UEFI firmware component (2026-10-30)](https://rewindex.com/change/r93eb85d76d530d)`


---
Canonical: https://rewindex.com/change/r93eb85d76d530d · Markdown: https://rewindex.com/change/r93eb85d76d530d.md · JSON: https://rewindex.com/api/v1/changes/r93eb85d76d530d · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T13:38:55.013Z