Weakness in Akaunting Invoice Validation Leads to Security Risks

CVE-2026-129248

What is CVE-2026-129248?

A vulnerability exists in the Invoice Item Validation function 'calculation_to_quantity' within the helpers.php file of Akaunting. This weakness allows for manipulation of the quantity argument, potentially resulting in numeric range comparisons that lack necessary minimum checks. Such exploit can be executed remotely, posing a risk to users. Even after notifying the vendor about this security disclosure, there was no response. Ensuring that the software is updated to a secure version is essential to mitigate potential attacks.

References