diff --git a/sbat.centos.csv b/sbat.centos.csv
index 23fbdf3..cce606f 100644
--- a/sbat.centos.csv
+++ b/sbat.centos.csv
@@ -1 +1 @@
-shim.centos,3,The CentOS Project,shim,15.8,security@centos.org
+shim.centos,3,The CentOS Project,shim,16.1,security@centos.org
diff --git a/shim-unsigned-x64.spec b/shim-unsigned-x64.spec
index c3fe42b..ff055ac 100644
--- a/shim-unsigned-x64.spec
+++ b/shim-unsigned-x64.spec
@@ -20,7 +20,7 @@
 
 Name:		shim-unsigned-%{efiarch}
 Version:	16.1
-Release:	1.el10.centos
+Release:	2.el10.centos
 Summary:	First-stage UEFI bootloader
 ExclusiveArch:	x86_64
 License:	BSD
@@ -161,6 +161,10 @@ cd ..
 %files debugsource -f build-%{efiarch}/debugsource.list
 
 %changelog
+* Thu Apr 23 2026 Nicolas Frayer <nfrayer@redhat.com> - 16.1-2.el10.centos
+- Update SBAT to 16.1 from 15.8
+- Related: RHEL-137056
+
 * Mon Apr 13 2026 Nicolas Frayer <nfrayer@redhat.com> - 16.1-1.el10.centos
 - Update shim to 16.1
 - Certs: Add centos_vendor.esl containing both CA2 and CA8 certs