Detections
Analytics
Alpine: multiple apt packages: security update to 3.2.1-r0
high Tenable Cloud Security Plugin ID 478402
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP
traffic (including a malicious mirror or proxy) between an APT client and an archive server triggered by a
package install can trick the client into installing an attacker-controlled unverified package and achieve
remote code execution with root privileges. The vulnerability is caused by the reuse of hard links and
requires the client to follow redirects and retry the download of package files. It requires the client to
have a non-zero Acquire::Retries configuration setting; the value 3 is the default starting with Debian 12
(bookworm) and Ubuntu 22.04 LTS (Jammy Jellyfish), so older releases are unaffected in a default
configuration (CVE-2026-109518)
Solution
Update the apt library and its related packages to version 3.2.1-r0 or later.See Also
Plugin Details
Severity: High
ID: 478402
Version: Revision 1.1
Type: Local
Published: 11/5/2026
Updated: 11/5/2026
Supported Sensors: Agentless Assessment
Risk Information
VPR
Risk Factor: Medium
Score: 6.9
Percentile: 96.29
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2026-109518
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 8.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
CVSS v4
Risk Factor: High
Base Score: 7.7
Threat Score: 5.2
Threat Vector: CVSS:4.0/E:U
Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Vulnerability Information
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 11/4/2026
Reference Information
CVE: CVE-2026-109518