{"id":"CVE-2026-101275","published":"2026-11-10T12:17:16.073","lastModified":"2026-11-10T12:17:16.073","description":"Our payment integration with Adyen did not properly validate payment status responses. An attacker could use a successful payment status response from one payment and supply it to the system for a different payment, gaining access to multiple valid tickets with only one payment.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://pretix.eu/about/en/blog/20261110-adyen/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}