VulDB 🛡@vuldb
🚨 Our CTI team identified a lot of activities targeting Red Hat Enterprise Linux and other products (CVE-2026-16487) vuldb.com/vuln/422255/cti https://t.co/USwXSz6Ut4
00001105
2.3K followersView on X
CVE-2026-16487
LOWCVSS 8.1 · HIGHSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in bootc when operating with the default containers signature policy. Automatic or manual upgrades of a mutable image tag may apply unsigned content for registries that fall through to insecureAcceptAnything, allowing an attacker who can update that tag to execute arbitrary OS content as the host root filesystem on reboot.
0.0/ 10 priority
Sources & remediation
Other references
Weakness type (CWE)
CWE-345
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day