CVE-2026-13223
Insufficient validation of payment status in pretix-computop
Our payment integration with Computop-based payment methods did not properly validate payment status responses. An attacker could use a successful payment status response from one payment and supply it to the system for a different payment, gaining access to multiple valid tickets with only one payment.
CVSS 4.0 · 6.3 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products