Weekly recap: OpenSSH SSHole probed, Zyxel zero-day hits switches
Twenty OpenSSH attempts came from 13 IPs, and a Zyxel flaw was used on nearly 1,000 switches.
74
- Mentions · 7d9
- Mentions · 30d9
- All mentions9
- First seenNov 4, 2026
- Last mentioned2h ago
Timeline
9 articles · newest firstDebian Ubuntu patch APT flaw allowing root via redirects
CVE-2026-109518 in APT lets MITM attackers install packages with root privileges using HTTP redirects and retries.
65
Debian and Ubuntu APT Vulnerability Allows Root Code Execution (CVE-2026-109518)
CVE-2026-109518 in APT lets on-path attackers install malicious packages with root privileges via HTTP redirects and retry mishandling.
70
CVE-2026-109518: RCE in Debian apt package manager
Debian advisory reveals man-in-the-middle vulnerability in APT allowing package replacement.
50
Debian and Ubuntu APT flaw allows package swap
The flaw in APT lets MitM attackers swap verified packages and run code as root when retries are enabled.
70
Debian APT flaw lets attackers hijack updates and run code as root
CVE-2026-109518 in APT allows network attackers to replace verified packages and execute code as root on Debian releases.
70
Debian apt security update for CVE-2026-109518
Max Justicz found vulnerability allowing man-in-the-middle attackers to execute arbitrary code as root after HTTP redirects.
60
APT mishandles hard links allowing remote code execution
A remote on-path attacker can trick APT into installing an unverified package and achieve root-level remote code execution.
30
Debian apt security update fixes man-in-the-middle code execution
Max Justicz discovered a vulnerability in apt allowing man-in-the-middle attackers to execute arbitrary code as root by merging package downloads; fixed in version 3.0.4.
50
Related CVEs
by mentions- CVE-2026-109518<1%7.7Man-in-the-middle RCE in APT on Debian and Ubuntu
- Out-of-bounds write in Zyxel GS1900-24E CGI up to 2.90(AAHK.2)C0
- CVE-2026-1231581%8.1Password bypass in OpenSSH before 10.6p2 on musl without PAM
Appears with
- debianvendor · 7
- ubuntuvendor · 3
- Canonicalvendor · 1
- OPSSHIELDvendor · 1
- mSeven Softwarevendor · 1
- Crafty Falconthreat actor · 1
- Kapibalathreat actor · 1
- XLaborganization · 1
- CERT-Inorganization · 1
- Zyxelvendor · 1
- GS1900product · 1
- JITTERLYmalware · 1
- OpenSSHproduct · 1
- Control Web Panelproduct · 1
- CWPdoormalware · 1
- mSecureproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.