CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

← Back to feed

USN-8580-2: AccountsService vulnerabilities

unknownCVE-2026-61897CVE-2026-61898
USN-8580-1 fixed vulnerabilities in AccountsService. This update provides the corresponding fixes for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: It was discovered that the Ubuntu-specific SetLanguage patch to AccountsService incorrectly handled dropping privileges. A local attacker could use this issue to execute arbitrary commands as an administrator. (CVE-2026-61897) It was discovered that the Ubuntu-specific SetLanguage helpers for AccountsService incorrectly handled parsing configuration files. A local attacker could use this issue to execute arbitrary commands. (CVE-2026-61898)

CSIRTS triage

vendor: Ubuntuproduct: AccountsServicePrivilege escalationaffected: Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS
What
Local attackers can execute arbitrary commands as an administrator due to privilege handling issues.
Who is affected
Users of AccountsService on the specified Ubuntu versions are affected.
Urgency
Remediation is critical as it allows local privilege escalation.
Action
Apply the latest updates for AccountsService on affected Ubuntu versions.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch AccountsService

Get an email when a new AccountsService advisory drops — max one per day, one-click unsubscribe.

Details

Source
Ubuntu Security Notices (INTL · vendor-psirt · site)
Severity
unknown
Published
2026-07-21
Exploitation
Not in CISA KEV at last sync

Original advisory: https://ubuntu.com/security/notices/USN-8580-2

Referenced CVEs

CVECSIRTS overviewExternal
CVE-2026-61897coverage & exploitation statusNVD · CVE.org
CVE-2026-61898coverage & exploitation statusNVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

More from Ubuntu Security Notices