CVE-2026-125744

The Pretix platform contains an API endpoint for changing ticket layouts that fails to properly validate the permissions of the requesting user or API token. This vulnerability allows an attacker with only read-only access to an event to modify that event's ticket layout . No specific exploit inf...

EUVD-2026-121041

Our API endpoint for changing ticket layouts did not properly check permissions of the requesting user or API token. An attacker with read-only access to an event could use this to change the event's ticket layout...

CVE-2026-125744 Missing permission check in ticket layout API

Our API endpoint for changing ticket layouts did not properly check permissions of the requesting user or API token. An attacker with read-only access to an event could use this to change the event's ticket layout...