HIGH 8.1 NVD
CVE-2026-16487
A flaw was found in bootc when operating with the default containers signature policy. Automatic or manual upgrades of a mutable image tag may apply unsigned co
A flaw was found in bootc when operating with the default containers signature policy. Automatic or manual upgrades of a mutable image tag may apply unsigned content for registries that fall through to insecureAcceptAnything, allowing an attacker who can update that tag to execute arbitrary OS content as the host root filesystem on reboot.
References
- https://access.redhat.com/security/cve/CVE-2026-16487
- https://bugzilla.redhat.com/show_bug.cgi?id=2503686
This high severity vulnerability with a CVSS score of 8.1 was published on 2026-10-19 via NVD.
vulnfeed aggregates 17512 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.