CVE-2026-42604 Blast Radius

MEDIUM • CVSS 6.9Actual is a local-first personal finance tool. The `POST /openid/config` endpoint in Actual Budget's sync-server versions <= 26.4.0 exposes the full O…

Is Your Infrastructure Using These Packages?

EchelonGraph automatically scans your cloud infrastructure and SBOMs to map your exposure to vulnerabilities like CVE-2026-42604.

Start Free Scan →← Back to CVE-2026-42604