CVE-2026-13350
Low
Description
Permissions where checked incorrectly during room creation, allowing attackers to create rooms of types they shouldn't be allowed to create.
SeverityLow
CVSS2.3
Exploit probability—
ProductVenueless
PublishedJun 25, 2026
First seenJun 25, 2026
How to fix
Update
- pretix Venueless0a35457f or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pretix Venueless | v < 0a35457f | 0a35457f |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.