CVE-2026-27584 | actualbudget actual up to 26.2.0 missing authentication (GHSA-m2cq-xjgm-f668)

February 24, 2026 Yanac

A vulnerability, which was classified as critical, has been found in actualbudget actual up to 26.2.0. The impacted element is an unknown function. Performing a manipulation results in missing authentication.

This vulnerability is reported as CVE-2026-27584. The attack requires a local approach. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More