Akaunting vulnerabilities
14 published CVEs name Akaunting among the affected products.
- 14Published CVEs14 of them scored
- 8Last 12 monthspublished in the last year
- 0Critical6 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2022-51019
Akaunting before 2.1.31 OS Command Injection via app alias
akaunting · akaunting
High8.7 - CVE-2026-19198
Akaunting 3.1.21 - Improper authorization in BulkActions handle dispatch
Akaunting · Akaunting
High8.7 - CVE-2026-16772
CVE-2026-16772
Akaunting · Akaunting
High8.1 - CVE-2026-71251
Akaunting - Cross-Company Media IDOR in Customer Portal Download Endpoint
akaunting · akaunting
Medium6.5 - CVE-2026-11994
Akaunting 3.1.21 - Authenticated stored XSS in report description rendering
Akaunting · Akaunting
Medium4.8 - CVE-2026-11943
Akaunting 3.1.21 - Authenticated stored XSS in document timeline
Akaunting · Akaunting
Medium4.8 - CVE-2026-11942
Akaunting 3.1.21 - Stored XSS in delete confirmation modal
Akaunting · Akaunting
Medium4.8 - CVE-2024-58293
Akaunting 3.1.8 Server-Side Template Injection via Multiple Form Fields
Akaunting · Akaunting
High8.6 - CVE-2021-36805
Akaunting Invoice Footer Persistent XSS
Akaunting · Akaunting
Medium5.2 - CVE-2021-36804
Akaunting Password Reset Relay
Akaunting · Akaunting
Medium5.4