Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-61898 is an OS command injection vulnerability in Canonical's accountsservice affecting certain Ubuntu-specific language helper scripts. The vulnerability arises because these scripts treat the user-controlled LANGUAGE entry in ~/.pam_environment as trusted input and interpolate it unescaped into a GNU sed replacement expression. This allows an attacker to inject arbitrary shell commands executed with root privileges via the SetLanguage D-Bus method. The issue affects multiple specific versions of accountsservice prior to 23.13.9-8ubuntu7. The vulnerability has a high severity score of 7.8 CVSS v3.1. Join the discussion | CVE Database V5 | 08/20/2026, 14:32:59 UTC Added: 08/20/2026, 14:38:09 UTC |
0 CVE-2026-61897 is a local privilege escalation vulnerability in Ubuntu's accountsservice prior to version 23.13.9-8ubuntu7. The flaw arises because an Ubuntu-specific patch only partially drops privileges before launching language helper scripts, leaving the real user ID as root. This allows a shell spawned by the helper script to inherit root privileges and potentially regain full root access. The vulnerability has a high severity with a CVSS score of 7.8. Join the discussion | CVE Database V5 | 08/20/2026, 14:32:53 UTC Added: 08/20/2026, 14:38:09 UTC |
A vulnerability in accountsservice version 0.6.37 and several related Ubuntu package versions allows local users to obtain encrypted passwords via the user_change_password_authorized_cb() function in user.c. This issue affects multiple Ubuntu LTS releases and related package versions. The vulnerability does not impact integrity or availability but allows limited confidentiality exposure of encrypted password data. Join the discussion | GCVE Database | 11/27/2019, 18:15:00 UTC Added: 07/22/2026, 00:11:36 UTC |
Showing 1 to 3 of 3 results