CVE-2026-46700 Blast Radius

MEDIUM • CVSS 4.3Actual is a local-first personal finance tool. Prior to 26.6.0, the GET /secret/:name endpoint in @actual-app/sync-server checks only that the caller …

Is Your Infrastructure Using These Packages?

EchelonGraph automatically scans your cloud infrastructure and SBOMs to map your exposure to vulnerabilities like CVE-2026-46700.

Start Free Scan →← Back to CVE-2026-46700