Product
APT
- First Reported
- Nov 4, 2026
- Latest Reported
- Nov 5, 2026
Reported Context (3)
- A high-severity vulnerability in APT, the package management system used by Debian, Ubuntu, and derivative Linux distributions, could allow an on-path attacker to replace a verified software package with a malicious one CVE-2026-109518 Lets On-Path Attackers Bypass APT Package Verification
- On November 4, 2026, Debian and Ubuntu shipped fixes for CVE-2026-109518, a flaw in apt, the package manager used by Debian, Ubuntu, and most of their derivatives. An attacker who can tamper with the network traffic CVE-2026-109518 Lets On-Path Attackers Replace Verified APT Packages and Execute Code as Root
- A flaw in APT, the package manager for Debian and Ubuntu, allows an attacker who can modify package downloads to swap a checked package for their own. APT Flaw Lets Traffic-Interfering Attackers Replace Verified Packages and Run Code as Root
CVE (1)
People (1)
MITRE ATT&CK (2)
Vendors (3)
Products (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.