CVE-2026-16487

Rejected reason: Red Hat Product Security has determined that this is not a vulnerability in bootc or containers-common. bootc fetches images under /etc/containers/policy.json. The shipped default is insecureAcceptAnything for registries without an explicit signature requirement; registry.redhat.io and registry.access.redhat.com require signatures. Updating a mutable tag requires the ability to publish to the reference an administrator has already configured the host to follow. Requiring signatures is available through that policy and through bootc enforce-container-sigpolicy, which is off by default. Persistence of /var across bootc rollback is expected image-mode behavior.

Published

Oct 19, 2026

Last Modified

Oct 21, 2026

Status

Rejected

• CVE-2026-16480IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is …7.1
• CVE-2026-16481A Server-Side Request Forgery (SSRF) and credential exfiltra…7.5
• CVE-2026-16482The rtMedia for WordPress, BuddyPress and bbPress plugin for…7.5
• CVE-2026-16484A flaw has been found in SourceCodester Class and Exam Timet…7.3
• CVE-2026-16485A vulnerability has been found in SourceCodester Class and E…4.3
• CVE-2026-16486A vulnerability was found in SourceCodester Class and Exam T…4.3
• CVE-2026-16488A vulnerability was determined in QUSETIONS MiniCode-Python …5
• CVE-2026-16489A vulnerability was identified in jsforce up to 3.10.16. Thi…5.3
• CVE-2026-1649The Community Events plugin for WordPress is vulnerable to S…4.4
• CVE-2026-16490A security flaw has been discovered in itsourcecode Hospital…6.3
• CVE-2026-16491Grafana’s RBAC service ignored the requested folder when che…6.5
• CVE-2026-16492A weakness has been identified in umijs umi up to 4.6.63. Th…5.5