Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-61898: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Canonical accountsserviceCVE-2026-61898 0 CVE-2026-61898 is a high-severity OS command injection vulnerability in Canonical's accountsservice. It arises from improper neutralization of special elements in user-controlled LANGUAGE entries in ~/.pam_environment. The vulnerability allows an attacker to inject arbitrary shell commands via the SetLanguage D-Bus method, executing with root privileges. The affected versions include specific Ubuntu package versions of accountsservice. No official patch or remediation guidance is currently confirmed. Join the discussion | CVE Database V5 | 08/20/2026, 14:32:59 UTC Added: 08/20/2026, 14:38:09 UTC |
CVE-2026-61897: CWE-273: Improper Check for Dropped Privileges in Canonical accountsserviceCVE-2026-61897 0 CVE-2026-61897 is a local privilege escalation vulnerability in the Ubuntu-specific patch of accountsservice before version 23.13.9-8ubuntu7. The patch only partially drops privileges by changing the effective UID/GID to the target user but leaves the real UID as root (0). This allows a shell spawned by a helper script to inherit a real UID of 0 and potentially reset its effective UID to root, enabling privilege escalation. Join the discussion | CVE Database V5 | 08/20/2026, 14:32:53 UTC Added: 08/20/2026, 14:38:09 UTC |
Accountsservice: An issue exists AccountService 0.6.37 in the user_change_password_authorized_cb() function in user.c which could let a local users obtain encrypted…CVE-2012-6655 0 A vulnerability in accountsservice version 0.6.37 and several related Ubuntu package versions allows local users to obtain encrypted passwords via the user_change_password_authorized_cb() function in user.c. This issue affects multiple Ubuntu LTS releases and related package versions. The vulnerability does not impact integrity or availability but allows limited confidentiality exposure of encrypted password data. Join the discussion | GCVE Database | 11/27/2019, 18:15:00 UTC Added: 07/22/2026, 00:11:36 UTC |
Showing 1 to 3 of 3 results