apt vulnerabilities

CVEs whose affected-version data names the apt package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-109518High· 7.7PoC

2d ago

APT RCE via hard link reuse

On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic (including a malicious mirror or proxy) between an APT client and an archive server triggered by a package install can trick t…

▾ MidnightDebian · aptvia CVEORG