NVD Vulnerability Detail
Search Exploit, PoC
CVE-2026-43872
Summary

Actual is an open-source personal finance application. Prior to version 26.5.0, several endpoints are affected by a path traversal vulnerability. Version 26.5.0 fixes the issue.

Publication Date June 13, 2026, 5:16 a.m.
Registration Date June 14, 2026, 4:11 a.m.
Last Update June 13, 2026, 5:16 a.m.
Related information, measures and tools
Common Vulnerabilities List