NewsThe Hacker News
Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root
More on MitM
Other advisories
- CriticalCVE-2026-121640WatchGuard AuthPoint Gateway: forged auth results, replayed admin actions, MITM and unauthenticated DoS (CVE-2026-121637 to CVE-2026-121640)
- Not ratedosv:CLEANSTART-2026-NQ21805Missing cryptographic key commitment in the AWS SDK for PHP may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data k...
- Not ratedosv:CVE-2026-62335OpenVM's OpenVmHalo2Verifier accepts non-canonical app commitments
- Not ratedosv:CVE-2026-118682ClashMi through 1.0.32.1801 Disabled TLS Certificate Validation Enables Update MITM
- HighCVE-2026-110872Nodemailer: Quadratic (O(n^2)) SMTP client reply parsing lets a malicious server or MITM cause a pre-auth remote denial of service
- Mediumghsa:GHSA-4g23-2xm8-66gcNodemailer: Quadratic (O(n^2)) SMTP client reply parsing lets a malicious server or MITM cause a pre-auth remote denial of service
- Not ratedosv:GO-2026-6651Pinning a CA certificate via pinnedPeerCertSha256 can lead to the success of MITM attacks in github.com/xtls/xray-core
- HighCVE-2026-107812Nginx UI: Self-upgrade runs an unsigned binary verified only by a same-origin digest → RCE via a compromised mirror or MITM in github.com/0xJacky/Nginx-UI
Other news entries
- Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS FlawsNewsSecurityWeek
- Cisco Unified Communications Products Security Hardening Release: October 2026NewsCisco PSIRT
- Cisco Expressway Series Security Hardening Release: October 2026NewsCisco PSIRT
- Multiple Cisco Products Snort 3 Security Hardening Release: October 2026NewsCisco PSIRT
- EMudhra Intermediate CA Certificates CompromisedNewsPalo Alto Networks Unit 42
- Cisco Meraki Security Hardening Release: October 2026NewsCisco PSIRT
- Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026NewsCisco PSIRT
- Cisco License (Smart Software Manager) On-Prem Security Hardening Release: October 2026NewsCisco PSIRT
Source: https://thehackernews.com/2026/11/debian-and-ubuntu-apt-flaw-lets-mitm.html
ID