HIGHCVSS v3.1 8.1Vulnerability
CVE-2026-16487
A flaw was found in bootc when operating with the default containers signature policy. Automatic or manual upgrades of a mutable image tag may apply unsigned content for registries that fall through to insecureAcceptAnything, allowing an attacker who can update that tag to execute arbitrary OS content as the host root filesystem on reboot.
Properties
- Severity
- HIGH
- Nvd fetched at
- 2026-10-20T21:14:08.448323+00:00
- Epss score
- 0.00173
- Cvss severity
- HIGH
- Cvss score
- 8.1
- Retrieved at
- 2026-10-21T01:24:48+00:00
- Last source
- FIRST EPSS
- Score
- 8.1
- Cvss version
- 3.1
- Cve id
- CVE-2026-16487
- Cvss vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- First seen by Signal
- 2026-10-19T06:58:53+00:00
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- Published at
- 2026-10-19T06:17:24.203
- Last modified
- 2026-10-19T21:03:27.760
- Epss percentile
- 0.06308
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph