CVE-2026-109518: APT allows code execution as root

An attacker who can modify traffic between APT and the package server can replace a verified download with their own…

read more