apt

APT Flaw (CVE-2026-109518) Lets On-Path Attacker Run Code as Root During Package Installs

A high-severity APT flaw (CVE-2026-109518, CVSS 7.7) lets an on-path attacker swap verified packages and run code as root on Debian 12+ and Ubuntu 22.04+ defaults. Fixed builds are out for all supported Ubuntu releases.