• GROW STRONG. SECURELY.
    MANAGED TECHNOLOGY SERVICES
    Accelerate business. Enhance productivity.
    Maintain compliance.

    • Future-Proof Your Business with Strategic IT Solutions

    Gain confidence knowing your organization is secure, efficient, and resilient in a rapidly evolving digital world.

    Managed IT
    Cybersecurity
    Compliance
    Artificial Intelligence
    Leadership & Advisory

    MANAGED IT

    IT Essentials: The Smarter, Safer Way to Run Your Business.

    IT Essentials isn’t just IT support—it’s the foundation for your business’s growth, security, and success.

    With expert Help Desk support, proactive network monitoring, and built-in security protections, IT Essentials delivers the reliable, high-performance environment your business demands. Your dedicated account executive works as an extension of your team, aligning technology to your strategic goals and maximizing the return on your IT investment.

    Protect your business. Empower your people. Accelerate your growth.

    Start with IT Essentials today

    Solutions That Power Secure, Scalable Growth

    100% focus on client success

    For over 35 years, our team of 190+ U.S.-based technology, cybersecurity, and compliance experts has been helping businesses like yours achieve secure, sustainable growth. We deliver strategic, right-sized managed IT solutions that protect your critical assets, support compliance, and fuel operational success.

     

    At Systems Engineering, every service we provide is proactive, scalable, and purpose-built to meet the evolving demands of your business—because every employee is invested your success.

     

    SECURE YOUR SUCCESSS

    FLAGSHIP METHODOLOGY

    Adaptive Cybersecurity Framework (aCSF)

    At the core of our services is aCSF, a continuous improvement approach to security maturity. We infuse security across our people, processes, and technologies to help companies get ahead of and manage cyber risks:

    • Secure & Enhance Productivity
    • Operationalize NIST
    • Achieve & Maintain Compliance

     

    LEARN MORE

    Experience Exceptional:
    Leading the IT Conversation

    Systems Engineering Blog

    We're leading the IT Conversation. Rely on Systems Engineering for the latest IT news, events, and trends.

    Critical UEFI Vulnerability CVE-2026-97631: What You Need to Know

    A newly disclosed vulnerability, CVE-2026-97631, affects a network-boot component within TianoCore EDK II, technology used in some UEFI firmware.  The vulnerability has received a critical 9.5 severity rating because successful exploitation could potentially allow an attacker to execute code before the operating system and endpoint security controls load.

    What is the actual risk?

    Despite its critical rating, exploitation requires specific conditions.  The vulnerable functionality is associated with PXE network boot, meaning an attacker must be able to communicate with an affected system while it is actively performing a network boot.

    For most client environments, this significantly reduces practical exposure.  Servers and infrastructure protected behind properly configured firewalls such as FortiGate or Cisco, without Internet-accessible management or provisioning interfaces, are not ordinarily exposed to this attack directly from the Internet.

    A remote attacker would generally need to first establish an internal foothold or otherwise gain access to a network capable of reaching the affected system during PXE boot.

    Systems that do not use PXE or UEFI network boot have substantially less exposure to this vulnerability.

    What Systems Engineering is doing

    • Monitoring HPE, Dell, HP, Lenovo, and NetApp for product-specific security advisories and firmware updates.
    • Evaluating the use of PXE and UEFI network boot across applicable infrastructure.
    • Reviewing network segmentation and exposure of provisioning infrastructure where applicable.
    • Planning review and deployment strategies for vendor-approved firmware updates where affected products are identified.

    What should you do?

    Systems protected by properly configured firewalls and without exposed network-boot services do not currently require emergency client action.

    Where PXE or UEFI network boot is not required, we recommend disabling the functionality as an additional precaution.  Organizations using PXE should ensure provisioning networks are isolated from untrusted, guest, wireless, and unnecessary user networks.

    We will continue monitoring vendor guidance and will work directly with affected clients if remediation becomes necessary.

    Our Assessment

    Severity: Critical | Practical risk for most managed environments: Low

    CVE-2026-97631 demonstrates why vulnerability severity alone does not determine organizational risk.  Existing controls such as network segmentation, restricted management access, firewall protections, and reducing unnecessary services can significantly limit real-world exploitability while vendors develop and distribute firmware updates.

    Questions?

    If you have questions related to this finding or would like assistance in reviewing your computing system for vulnerable access to these risk factors, please contact your Account Manager at Systems Engineering directly.

    See All Posts