CVE-2026-109518

CVE

Threat entity extracted from intelligence sources

Frequency

8

occurrences

First Seen

November 4, 2026

Last Seen

November 9, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

High-Risk APT Vulnerability Disclosed for Debian and Ubuntu67.3

A vulnerability, tracked as CVE-2026-109518, was disclosed on November 4, 2026, affecting the APT package manager in Debian, Ubuntu, and their derivatives. An on-path attacker can manipulate HTTP traffic to install unverified packages, leading to arbitrary code execution with root privileges. The fl...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

High-Risk APT Vulnerability Disclosed for Debian and Ubuntu

6d ago·9 sources

Related Articles (8)

⚡ Weekly Recap: SSHole Exploited, APT Root RCE, Robot Takeovers, 15K Hacked Sites, and More

Thehackernews·1d ago

Debian, Ubuntu patch APT flaw that could hand attackers root

Csoonline·5d ago

APT flaw lets attackers replace verified packages and gain root

Feeds.4Sysops·5d ago

CVE-2026-109518 APT vulnerability fixes available

Exploit for CVE-2026

Sploitus·6d ago

1 / 2

Related Entities

Crafty Falcon Zero-day Exploit Man-in-the-Middle Phishing Ransomware Supply Chain Attack PhantomDOM Debian Ubuntu Canonical Denmark Iran