CVE-2026-19198 — Akaunting 3.1.21 - Improper authorization in BulkActions handle dispatch

CVE-2026-19198

Akaunting 3.1.21 - Improper authorization in BulkActions handle dispatch PUBLISHED

Description (CNA)

Akaunting 3.1.21 contains an authenticated improper authorization vulnerability in the common BulkActions dispatcher.This issue affects Akaunting: 3.1.21.

Affected (CNA)

Vendor / product	Versions
Akaunting / Akaunting	affected 3.1.21

CWE

CWE-863

References

https://fluidattacks.com/advisories/badbo
https://github.com/akaunting/akaunting
https://github.com/akaunting/akaunting/commit/96c38008cf6f907e3e7341d9660de2912e0f2f13

ADP enrichment

CISA-ADP

No English description supplied.

https://fluidattacks.com/advisories/badbo