Akaunting

Products

Exploited and recent CVEs

• CVE-2022-51019 High 8.8 Akaunting before 2.1.31 OS Command Injection via app alias 1.8%
• CVE-2026-19198 High 8.7 Akaunting 3.1.21 - Improper authorization in BulkActions handle dispatch 0.3%
• CVE-2026-16772 High 8.1 CVE-2026-16772 0.4%
• CVE-2026-71251 Medium 6.5 Akaunting - Cross-Company Media IDOR in Customer Portal Download Endpoint 0.3%
• CVE-2026-11994 Medium 4.8 Akaunting 3.1.21 - Authenticated stored XSS in report description rendering 0.4%
• CVE-2026-11943 Medium 4.8 Akaunting 3.1.21 - Authenticated stored XSS in document timeline 0.4%
• CVE-2026-11942 Medium 4.8 Akaunting 3.1.21 - Stored XSS in delete confirmation modal 0.4%
• CVE-2024-58293 High 8.6 Akaunting 3.1.8 Server-Side Template Injection via Multiple Form Fields 0.4%
• CVE-2021-36805 Medium 5.2 Akaunting Invoice Footer Persistent XSS 0.6%
• CVE-2021-36804 Medium 5.4 Akaunting Password Reset Relay 1.0%
• CVE-2021-36803 Medium 6.3 Akaunting Avatar Persistent XSS 0.6%
• CVE-2021-36802 Medium 6.5 Akaunting DoS via User-Controlled 'locale' Variable 1.0%
• CVE-2021-36801 High 8.1 Akaunting Authentication Bypass in Company Selection 1.1%
• CVE-2021-36800 High 8.7 Akaunting OS Command Injection in 'Money.php' 1.5%