akaunting
Security Risk Profile
32
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 18 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 21, 2021 to present
18
Total CVEs
6
Critical+High
1
Exploited
5
Unpatched
Threat Assessment
Avg CVSS
6.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
5
Critical/High
Risk Level
32/100
low
⚠️ 1 Active Exploits🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
2High
4Medium
10Low
2Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
3Age Distribution
Common Weaknesses (CWE)
1
XSS
8
2
Code Injection
2
3
SSRF
1
4
OS Command Injection
1
5
Command Injection
1
Most Affected Products
1. Akaunting Akaunting19
2. Akaunting Akaunting Customer Portal1
Recent Vulnerabilities
See more →CVE-2026-71251
CVSS 6.5medium
Akaunting: Cross-Company Media IDOR in Customer Portal Download Endpoint
8/5/2026🔧 No Patch
CVE-2026-11994
CVSS 4.8medium
Akaunting 3.1.21 - Authenticated stored XSS in report description rendering
6/22/2026🔧 No Patch
CVE-2026-11943
CVSS 4.8medium
Akaunting 3.1.21 - Authenticated stored XSS in document timeline
6/22/2026🔧 No Patch
CVE-2026-11942
CVSS 4.8medium
Akaunting 3.1.21 - Stored XSS in delete confirmation modal
6/22/2026🔧 No Patch
CVE-2026-8193
CVSS 2.1EPSS 0%low
Akaunting Invoice PDF Rendering dompdf.php server-side request forgery
5/9/2026🔧 No Patch
CVE-2026-5568
CVSS 2.0EPSS 0%low
Akaunting Invoice/Billing cross site scripting
4/5/2026🔧 No Patch
CVE-2024-58293
CVSS 8.6high
Akaunting 3.1.8 Server-Side Template Injection via Multiple Form Fields
12/11/2025🔧 No Patch
CVE-2025-55522
CVSS 6.5medium
8/21/2025🔧 No Patch
CVE-2025-55521
CVSS 6.5medium
8/21/2025🔧 No Patch
CVE-2024-22836
CVSS 9.8EPSS 0%critical
2/8/2024⚠ Exploited🔧 No Patch
Monitor akaunting in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.