Linuxsecurity Ubuntu Advantage Tools Vulnerabilities Lead to Security Risks
Article Content
- •Ubuntu Advantage Tools had vulnerabilities allowing unauthorized access and code execution.
- •The regression affected only Ubuntu 14.04 LTS, causing issues with enabling esm-infra-legacy.
- •Multiple CVEs were identified, including CVE-2026-9494 and CVE-2026-12391, necessitating immediate updates.
On September 1, 2026, Ubuntu released USN-8555-2 to address a regression introduced by USN-8555-1 in Ubuntu Advantage Tools, affecting Ubuntu 14.04 LTS. The vulnerabilities, discovered by Bilal Teke and Frederick Jerusha, included exposure of the Pro bearer token in command-line arguments (CVE-2026-9494) and improper validation of data from the contract server, allowing potential arbitrary code execution. Additionally, Mateusz Gierblinski identified an issue with symbolic link handling that could expose sensitive information on various Ubuntu versions. The update resolves the regression preventing esm-infra-legacy from being enabled. Users are advised to update their systems to mitigate these risks.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Ubuntu and CVE-2026-11386 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…