EDKII CVE enables UEFI Secure Boot bypass in almost every use case of PXE Boot
nvd.nist.gov
nvd.nist.gov
I've never willingly had anything I'm responsible for use any kind of PXE Boot but I've worked with people who have and this alone is basically a way to ruin their entire year. If you are one such person, good luck.