Question 1

What is CVE-2026-43872 — CVE-2026-43872?

Accepted Answer

Actual is an open-source personal finance application. Prior to version 26.5.0, several endpoints are affected by a path traversal vulnerability. Version 26.5.0 fixes the issue.

Question 2

What is the authoritative source for CVE-2026-43872?

Accepted Answer

CVE-2026-43872 (CVE-2026-43872) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

EPSS	0.30% probability of exploitation · percentile 21.8% · 2026-06-19T12:03:05Z
Last modified	2026-06-16

CVE-2026-43872CVE-2026-43872

Description

Scoring