https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:36:00 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-359606 EUVD-2026-359606 https://cve.radiocsirt.org/vuln/euvd-2026-359606 https://cve.radiocsirt.org/vuln/fkie_cve-2026-61898 <p>The Ubuntu-specific language helper scripts (save-to-pam-env, update-langlist) shipped with accountsservice before 23.13.9-8ubuntu7 treat the user-controlled LANGUAGE entry in ~/.pam_environment as trusted input. The value is interpolated unescaped into a GNU sed replacement expression, allowing an attacker to inject a sed &#39;e&#39; flag and arbitrary shell commands that execute with the privileges of the AccountsService helper process (real UID 0) via the SetLanguage D-Bus method.</p> <p>The Ubuntu-specific language helper scripts (save-to-pam-env, update-langlist) shipped with accountsservice before 23.13.9-8ubuntu7 treat the user-controlled LANGUAGE entry in ~/.pam_environment as trusted input. The value is interpolated unescaped into a GNU sed replacement expression, allowing an attacker to inject a sed &#39;e&#39; flag and arbitrary shell commands that execute with the privileges of the AccountsService helper process (real UID 0) via the SetLanguage D-Bus method.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-61898 https://cve.radiocsirt.org/vuln/ghsa-vqj6-342m-9cvg <p>The Ubuntu-specific language helper scripts (save-to-pam-env, update-langlist) shipped with accountsservice before 23.13.9-8ubuntu7 treat the user-controlled LANGUAGE entry in ~/.pam_environment as trusted input. The value is interpolated unescaped into a GNU sed replacement expression, allowing an attacker to inject a sed &#39;e&#39; flag and arbitrary shell commands that execute with the privileges of the AccountsService helper process (real UID 0) via the SetLanguage D-Bus method.</p> <p>The Ubuntu-specific language helper scripts (save-to-pam-env, update-langlist) shipped with accountsservice before 23.13.9-8ubuntu7 treat the user-controlled LANGUAGE entry in ~/.pam_environment as trusted input. The value is interpolated unescaped into a GNU sed replacement expression, allowing an attacker to inject a sed &#39;e&#39; flag and arbitrary shell commands that execute with the privileges of the AccountsService helper process (real UID 0) via the SetLanguage D-Bus method.</p> https://cve.radiocsirt.org/vuln/ghsa-vqj6-342m-9cvg https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-61898 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: accountsservice, Ubuntu:Pro:16.04:LTS: accountsservice, Ubuntu:Pro:18.04:LTS: accountsservice, Ubuntu:Pro:20.04:LTS: accountsservice, Ubuntu:22.04:LTS: accountsservice, Ubuntu:24.04:LTS: accountsservice, Ubuntu:26.04:LTS: accountsservice</p> <p>The Ubuntu-specific language helper scripts (save-to-pam-env, update-langlist) shipped with accountsservice before 23.13.9-8ubuntu7 treat the user-controlled LANGUAGE entry in ~/.pam_environment as trusted input. The value is interpolated unescaped into a GNU sed replacement expression, allowing an attacker to inject a sed &#39;e&#39; flag and arbitrary shell commands that execute with the privileges of the AccountsService helper process (real UID 0) via the SetLanguage D-Bus method.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: accountsservice, Ubuntu:Pro:16.04:LTS: accountsservice, Ubuntu:Pro:18.04:LTS: accountsservice, Ubuntu:Pro:20.04:LTS: accountsservice, Ubuntu:22.04:LTS: accountsservice, Ubuntu:24.04:LTS: accountsservice, Ubuntu:26.04:LTS: accountsservice</p> <p>The Ubuntu-specific language helper scripts (save-to-pam-env, update-langlist) shipped with accountsservice before 23.13.9-8ubuntu7 treat the user-controlled LANGUAGE entry in ~/.pam_environment as trusted input. The value is interpolated unescaped into a GNU sed replacement expression, allowing an attacker to inject a sed &#39;e&#39; flag and arbitrary shell commands that execute with the privileges of the AccountsService helper process (real UID 0) via the SetLanguage D-Bus method.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-61898