Skip to content
Sign in
5.3 Medium

CVE-2026-129248 Akaunting Invoice Item Validation helpers.php calculation_to_quantity numeric range comparison without minimum check

Description

A weakness has been identified in Akaunting up to 3.3.0. The affected element is the function calculation_to_quantity of the file helpers.php of the component Invoice Item Validation. Executing a manipulation of the argument quantity can lead to numeric range comparison without minimum check. The attack may be performed from remote. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS 4.0 detail

Vector CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X

Exploitable remotely over the network, with an ordinary account and without any user action; the impact on data or service is limited.

Attack vector
Network
Attack complexity
Low
Attack requirements
None
Privileges required
Low
Interaction
None
Confidentiality
None
Integrity
Low
Availability
None
Confidentiality of other systems
None
Integrity of other systems
None
Availability of other systems
None

Affected products and versions

Product Affected versions Fixed in
Akaunting 3.3.0 No fix stated
Akaunting 3.2 No fix stated
Akaunting 3.1 No fix stated
Akaunting 3.0 No fix stated

Other CVEs of Akaunting

The 3 CVEs of Akaunting →
CVE-2026-8193 A weakness has been identified in Akaunting 3.1.21 5.3 Medium CVE-2026-5568 A vulnerability has been found in Akaunting up to 3.1.21 5.1 Medium
Track this CVE