VULNERABILITY INTELLIGENCE

CVE-2026-43872

EPSS probability0.30%
CISA KEVNot currently listed
Published2026-06-12
Last modified2026-10-26

Description

Actual is an open-source personal finance application. Prior to version 26.5.0, several endpoints are affected by a path traversal vulnerability. Version 26.5.0 fixes the issue.

Weakness classification

  • security-advisories@github.com: CWE-22

Primary references