VU#718077: UEFI Shell module embedded in SPI Flash can be used to bypass Secure Boot
2026-09-09T20:52:02Z•7244c7dcd82b57e18a861d61eb128f64328158f3587f3717687e1962a1751cb2
CVE-2025-20701CVE-2026-15630CVE-2026-19874CVE-2026-19912CVE-2026-19913CVE-2026-80047CVE-2026-84282BluetoothCERT/CCCasdoorHugging Face TransformersKalturaMetal Gear Online 3ONLYOFFICESPI flashSSRFSecure Boot bypassUEFIarbitrary file readarbitrary file writeauthorization bypassheap buffer overflowinsecure deserializationmulti-tenant isolationownCloudremote coderemote code executionunauthenticated pairing
What happened
CERT/CC vulnerability notes describe multiple 2026 vulnerabilities affecting firmware, Bluetooth earbuds, cloud integrations, IAM platforms, machine-learning libraries, video platforms, gaming software, and residential routers. Impacts include Secure Boot bypass and pre-boot code execution, unauthenticated Bluetooth pairing, SSRF, cross-tenant authorization bypass, unauthorized remote-code writes, arbitrary file read and remote code execution, and heap-based buffer overflow leading to client-side code execution.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- certcc_vulnotes
- Record identifier
- 7244c7dcd82b57e18a861d61eb128f64328158f3587f3717687e1962a1751cb2
- Enrichment time
- 2026-09-09T20:52:02Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.