Akaunting vulnerabilities

CVEs per yearBy the year they were published

1. 20216
2. 20251
3. 20267

Newest CVEs

• CVE-2022-51019

  Akaunting before 2.1.31 OS Command Injection via app alias

  akaunting · akaunting

  High8.7
• CVE-2026-19198

  Akaunting 3.1.21 - Improper authorization in BulkActions handle dispatch

  Akaunting · Akaunting

  High8.7
• CVE-2026-16772

  CVE-2026-16772

  Akaunting · Akaunting

  High8.1
• CVE-2026-71251

  Akaunting - Cross-Company Media IDOR in Customer Portal Download Endpoint

  akaunting · akaunting

  Medium6.5
• CVE-2026-11994

  Akaunting 3.1.21 - Authenticated stored XSS in report description rendering

  Akaunting · Akaunting

  Medium4.8
• CVE-2026-11943

  Akaunting 3.1.21 - Authenticated stored XSS in document timeline

  Akaunting · Akaunting

  Medium4.8
• CVE-2026-11942

  Akaunting 3.1.21 - Stored XSS in delete confirmation modal

  Akaunting · Akaunting

  Medium4.8
• CVE-2024-58293

  Akaunting 3.1.8 Server-Side Template Injection via Multiple Form Fields

  Akaunting · Akaunting

  High8.6
• CVE-2021-36805

  Akaunting Invoice Footer Persistent XSS

  Akaunting · Akaunting

  Medium5.2
• CVE-2021-36804

  Akaunting Password Reset Relay

  Akaunting · Akaunting

  Medium5.4