High · 8.7 CVE-2026-19198 EUVD-2026-62693GHSA-v47h-4p48-9r9r

Akaunting 3.1.21 - Improper authorization in BulkActions handle dispatch

Published Aug 19, 2026 · Updated Oct 15, 2026 · Assigned by Fluid Attacks

Description

Akaunting 3.1.21 contains an authenticated improper authorization vulnerability in the common BulkActions dispatcher.This issue affects Akaunting: 3.1.21.

Affected products

Vendor	Product	Affected	Fixed
Akaunting	Akaunting	3.1.21	—

References

https://fluidattacks.com/advisories/badbo third-party-advisory
https://github.com/akaunting/akaunting product
https://github.com/akaunting/akaunting/commit/96c38008cf6f907e3e7341d9660de2912e0f2f13 patch