CVE-2026-101267

UNKNOWN

Description

A missing permission check allowed low-privileged users with access to an event but without access to the event's orders to extract some specific information. This information includes the number of attendees and the total revenue.

Timeline

Published:September 29th, 2026 1:17 PM

Last modified:September 29th, 2026 9:28 PM

CVSS Scoring

No CVSS v3 score available

Weaknesses (CWE)

CWE-862

References & Reports

Advisories, patches, and third-party reports

https://pretix.eu/about/en/blog/20260929-release-2026-7-1/

Source: NIST NVD · Data may lag official sources by up to one minute