VU#738147: Vendor-signed UEFI Shell applications allow Secure Boot bypass

CERT/CC vulnerability notes describe multiple high-impact vulnerabilities across UEFI firmware and signed shell applications, Dokploy, MLflow, Sentry Seer, ExLlamaV3, AOMEI Backupper, and Skullcandy Dime devices. Impacts include Secure Boot bypass and pre-boot code execution, root-level OS command injection, arbitrary code execution through unsafe pickle deserialization or prompt injection, denial of service, and local privilege escalation with physical-disk writes. Vendors and users should apply available updates, disable risky automated workflows or exposed UEFI shells where applicable, and,