Security News Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root TheHackerNews Daniel Bender 04 Nov 2026 Share APT flaw CVE-2026-109518 lets attackers with HTTP traffic control replace verified packages and execute code as root when downloads retry.