CVE-2026-19198

LOWCVSS 8.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Akaunting 3.1.21 contains an authenticated improper authorization vulnerability in the common BulkActions dispatcher.This issue affects Akaunting: 3.1.21.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-863

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-13: 110-13
Referenced assets2 URLs
By indicator
Full discourse1 post
  • Fluid Attacks@fluidattacks

    A zero-day vulnerability in Akaunting was discovered by an external pentester, then reviewed and documented by Fluid Attacks: ID CVE-2026-19198. You can find the full details here: 🔗 https://fluidattacks.com/advisories/badbo. We have disclosed 279 #CVE to this date: 🔗https://fluidattacks.com/advisories. https://t.co/2MBmDuqo6i

    0000083
    900 followersView on X

Explore more