[ Vendor · 6 CVEs ]
pretix
CVEs affecting pretix published in the last 30 days, plus any pretix CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-101267 | 29 Sep 2026 | CVSS 2.7 | pretixA missing permission check allowed low-privileged users with access to an event but without access to the event's orders to extract some specific… | |
| CVE-2026-101268 | 29 Sep 2026 | CVSS 1.7 | pretixIf an attacker is able to convince a victim on a specially crafted link, the victim is logged in to the attacker's customer account. If the victim… | |
| CVE-2026-101269 | 29 Sep 2026 | CVSS 2.3 | pretixThe mechanism binding API-uploaded files to the uploader's authentication method is not working correctly and the same session token is used for all… | |
| CVE-2026-101270 | 29 Sep 2026 | CVSS 2.1 | pretixMalicious HTML content could be injected into the help texts of various fields with organizer permissions. | |
| CVE-2026-101271 | 29 Sep 2026 | CVSS 2.1 | pretixOAuth credentials (access tokens) are valid for the entirety of their lifetime, even if the application (OAuth client) they are bound to is manually… | |
| CVE-2026-101266 | 29 Sep 2026 | CVSS 1.3 | pretixA logic flaw in the checkout flow allows users to bypass validations performed during the check-in by skipping entire check-in steps. |