CVE-2026-16460: Bootc and Ostree Vulnerability Allows Unsigned OS Content to Compromise Host
A vulnerability in bootc and ostree allows unsigned OS content to remain bootable even after the signature policy has been hardened, leading to full host compromise on reboot. This affects Red Hat Enterprise Linux and Red Hat Hardened Images. CVSS score: 7.4.