CVE-2026-101266 - Checkout validation bypass

Back Back to CVE browser

LOW

Checkout validation bypass

Published Sep 29, 2026

1.3

LOW

CVSS 4.0

EPSS 0.27%

Description

A logic flaw in the checkout flow allows users to bypass validations performed during the check-in by skipping entire check-in steps.

Affected products

Vendor Pretix Product Pretix Default
unaffected
- Version
  0.0
  Status
  affected
  Constraints
  <2026.5.5
- Version
  2026.6.0
  Status
  affected
  Constraints
  <2026.6.2
- Version
  2026.7.0
  Status
  affected
  Constraints
  <2026.7.1

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Pretix

unaffected

Version	Status	Constraints
0.0	affected	<2026.5.5
2026.6.0	affected	<2026.6.2
2026.7.0	affected	<2026.7.1

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-88746
Advisory
https://pretix.eu/about/en/blog/20260929-release-2026-7-1/
vendor-advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-88746		Advisory
https://pretix.eu/about/en/blog/20260929-release-2026-7-1/		vendor-advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner rami.io

Published Sep 29, 2026

Updated Sep 29, 2026

Reserved Sep 28, 2026

Link CVE-2026-101266

CISA Vulnrichment

Updated Sep 29, 2026

NVD

Status Received

Modified Sep 29, 2026

Link CVE-2026-101266

Red Hat

Severity n/a

Public date n/a

Links CVE-2026-101266

ENISA EUVD

Assigner rami.io

Published Sep 29, 2026

Updated Sep 29, 2026

Exploited since n/a

Link EUVD-2026-88746

EUVD-2026-88746