CVE-2026-11386

creationtimestamp| type| source ---|---|--- 2026-07-16 13:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqrehj3yns2w 2026-07-16 14:20:05+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqrglhi4kn2l 2026-07-16 15:20:46+00:00| seen|...

CVE-2026-11386

An input validation and injection vulnerability exists in Canonical ubuntu-pro-client formerly ubuntu-advantage-tools. The client constructs APT source files such as /etc/apt/sources.list.d/ubuntu-.list or their DEB822 equivalents using data received directly from the contract server response via...