APT flaw CVE-2026-109518 lets attackers with HTTP traffic control replace verified packages and execute code as root when downloads retry.
A vulnerability in Debian and Ubuntu’s package manager could let network attackers replace verified software with malicious ...