Strix
65.5K

CVE-2026-101268

LOWCVSS 1.7/10

Last modified

CVE-2026-101268 is a low-severity vulnerability rated 1.7/10 on the CVSS scale. If an attacker is able to convince a victim on a specially crafted link, the victim is logged in to the attacker's customer account. If the victim does not notice this, this might lead to their order details being stored into the attacker's account.

Description

If an attacker is able to convince a victim on a specially crafted link, the victim is logged in to the attacker's customer account. If the victim does not notice this, this might lead to their order details being stored into the attacker's account. The attack only works when the event is available on a different domain than the organizer page.

Metrics

CVSS 4.0
1.7/10

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
pretixpretix>= 0.0, < 2026.5.5; >= 2026.6.0, < 2026.6.2; >= 2026.7.0, < 2026.7.1

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-101268?
If an attacker is able to convince a victim on a specially crafted link, the victim is logged in to the attacker's customer account. If the victim does not notice this, this might lead to their order details being stored into the attacker's account. The attack only works when the event is available on a different domain than the organizer page.
How severe is CVE-2026-101268?
CVE-2026-101268 has a CVSS score of 1.7/10 (LOW severity).
How do I fix CVE-2026-101268?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-101268?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST