Advisories · Technology

Canonical accountsservice.

Every CVE that names Canonical accountsservice among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-61898 CVE record

CVSS 7.8 High

accountsservice: shell injection via attacker-controlled ~/.pam_environment in Ubuntu language helper scripts
- Canonical accountsservice
- Command injection
Not analysed yet 20 Aug 2026
CVE-2026-61897 CVE record

CVSS 7.8 High

accountsservice: incomplete privilege drop when running Ubuntu-specific language helper scripts
- Canonical accountsservice
- CWE-273
Not analysed yet 20 Aug 2026