Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how akaunting compares to other vendors in security performance

View Risk Score →

Akaunting Akaunting Customer PortalAkaunting: Cross-Company Media IDOR in Customer Portal Download Endpoint

Risk 38
Severity
6.5
First published (updated )
CVE-2026-71251

Akaunting AkauntingAkaunting 3.1.21 - Authenticated stored XSS in report description rendering

Risk 29
Severity
4.8
First published (updated )
CVE-2026-11994

Akaunting AkauntingAkaunting 3.1.21 - Authenticated stored XSS in document timeline

Risk 29
Severity
4.8
First published (updated )
CVE-2026-11943

Akaunting AkauntingAkaunting 3.1.21 - Stored XSS in delete confirmation modal

Risk 29
Severity
4.8
First published (updated )
CVE-2026-11942

Akaunting AkauntingAkaunting Invoice PDF Rendering dompdf.php server-side request forgery

Risk 33
Severity
2.1
EPSS
0.04%
First published (updated )
CVE-2026-8193
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Akaunting AkauntingAkaunting Invoice/Billing cross site scripting

Risk 15
Severity
2
EPSS
0.01%
First published (updated )
CVE-2026-5568

Akaunting AkauntingAkaunting 3.1.8 Server-Side Template Injection via Multiple Form Fields

Risk 72
Severity
8.6
First published (updated )
CVE-2024-58293

Akaunting AkauntingXSS

Risk 38
Severity
6.5
First published (updated )
CVE-2025-55522

Akaunting AkauntingAn issue in the component /settings/localisation of Akaunting v3.1.18 allows authenticated attackers…

Risk 38
Severity
6.5
First published (updated )
CVE-2025-55521

Akaunting AkauntingOS Command Injection, Command Injection

Risk 76
Severity
9.8
Exploited
EPSS
0.45%
First published (updated )
CVE-2024-22836
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Akaunting AkauntingXSS

Risk 34
Severity
5.4
First published (updated )
CVE-2020-20908

Akaunting AkauntingAkaunting Invoice Footer Persistent XSS

Risk 36
Severity
5.2
First published (updated )
CVE-2021-36805

Akaunting AkauntingAkaunting Password Reset Relay

Risk 59
Severity
8.1
First published (updated )
CVE-2021-36804

Akaunting AkauntingAkaunting Avatar Persistent XSS

Risk 43
Severity
6.3
First published (updated )
CVE-2021-36803

Akaunting AkauntingAkaunting DoS via User-Controlled 'locale' Variable

Risk 38
Severity
6.5
First published (updated )
CVE-2021-36802
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Akaunting AkauntingAkaunting Authentication Bypass in Company Selection

Risk 60
Severity
8.1
First published (updated )
CVE-2021-36801

Akaunting AkauntingAkaunting OS Command Injection in 'Money.php'

Risk 72
Severity
9.1
First published (updated )
CVE-2021-36800

Akaunting AkauntingAkaunting <= 2.0.9 is vulnerable to CSV injection in the Item name field, export function. Attackers…

Risk 77
Severity
8.8
First published (updated )
CVE-2020-22390

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203