CVE-2026-5600

A new API endpoint introduced in pretix 2025 that is supposed to return all check-in events of a specific event in fact returns all check-in events belonging to the respective organizer. This allows an API consumer to access information for all other events under the same organizer, even those they should not have access to. These records contain information on the time and result of every ticket scan as well as the ID of the matched ticket. Example: { "id": 123, "successful": true, "error_reason": null, "error_explanation": null, "position": 321, "datetime": "2020-08-23T09:00:00+02:00", "list": 456, "created": "2020-08-23T09:00:00+02:00", "auto_checked_in": false, "gate": null, "device": 1, "device_id": 1, "type": "entry" } An unauthorized user usually has no way to match these IDs (position) back to individual people.

• CWE-653

• https://pretix.eu/about/en/blog/20260408-release-2026-3-1/Vendor Advisory

Published

Apr 8, 2026

Last Modified

Jul 24, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-55994Improper Input Validation, Exposure of Sensitive Information…7.5
• CVE-2026-55995A Double Free vulnerability in open-iscsi allows an unauthen…8.7
• CVE-2026-55996A denial-of-service vulnerability was identified in multiple…4.3
• CVE-2026-55997Rancher issues long-lived registration tokens to authenticat…8.8
• CVE-2026-55998The endpoint /v3/import/{token}_{clusterId}.yaml retrieves t…5.3
• CVE-2026-55999Local attackers with a X connection able to provide PCX font…7.8
• CVE-2026-56000Local attackers with a X connection able to provide GLX comm…7.8
• CVE-2026-56001A heap buffer overflow in BitmapScaleBitmaps in libXfont2 be…8.8
• CVE-2026-56002A heap bufferflow in pcfReadFont() due to missing glyph boun…8.8
• CVE-2026-56003A heap buffer overflow due to missing size checking in the p…8.8
• CVE-2026-56004A shellcode injection in the mercurial handler of the obs ta…10
• CVE-2026-56005Subscriber Cross Site Scripting (XSS) in WP Activity Log <= …7.1