CVE-2026-101266CWE-20

CVE-2026-101266

published September 29, 2026

CVSS
1.3
EPSS
0%
Percentile
17.5
In the wild
Unconfirmed
What it is

A logic flaw in the checkout flow allows users to bypass validations performed during the check-in by skipping entire check-in steps.

The record
Technical detail
CVSS
1.3 · NONE
CVSS v4.0
1.3 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:U
EPSS
0.00266 · 17.5th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2026-09-29T16:17Z
References (1)
https://pretix.eu/about/en/blog/20260929-release-2026-7-1/ · 655498c3-6ec5-4f0b-aea6-853b334d05a6
EPSS history
Timeline
  • 01 OCT 03:44Z
    EPSS moved — → 0%
    epss
  • 29 SEP 11:53Z
    Checkout validation bypass
    cvelistv5