Neutron, our AI engine, scored 97.1% on UC Berkeley's CyberGym benchmark. Learn more

Tag

#TOCTOU

1 articles

Deep Dive

APT Package-Swap RCE as Root on Debian and Ubuntu (CVE-2026-109518)

APT on Debian and Ubuntu can install an attacker's package after a redirect and a retry, giving an on-path attacker root; fixed in 3.3.6 and 3.0.4.

Ostorlab Team
Nov 05, 2026