CVE-2026-13223— Insufficient validation of payment status in pretix-computop
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| pretix | pretix-computop | < 1.3.2 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-13223
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Insufficient validation of payment status in pretix-computop
Source: NVD (National Vulnerability Database)
Vulnerability Description
Our payment integration with Computop-based payment methods did not properly validate payment status responses. An attacker could use a successful payment status response from one payment and supply it to the system for a different payment, gaining access to multiple valid tickets with only one payment.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
行为工作流的不恰当实施
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| pretix | pretix-computop | 0 ~ 1.3.2 | - |
II. Public POCs for CVE-2026-13223
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-13223
请登录查看更多情报信息。
Security Blog Posts for CVE-2026-13223 (1)
Same Patch Batch · pretix · 2026-06-25 · 10 CVEs total
| CVE-2026-57532 | TYPO3布局编辑器跨站脚本漏洞 | |
| CVE-2026-57535 | PDF渲染引擎SSRF漏洞 | |
| CVE-2026-57534 | Stored XSS in pretix-pages | |
| CVE-2026-57536 | Insufficient validation of payment status in pretix-mollie | |
| CVE-2026-57533 | pretix开放重定向致钓鱼漏洞 | |
| CVE-2026-13222 | Insufficient validation of payment status in pretix-oppwa | |
| CVE-2026-13225 | Stored XSS in ticket confirmation page | |
| CVE-2026-13350 | Room Creation权限校验缺陷 | |
| CVE-2026-13314 | Stored XSS in pretix-digital |
IV. Related Vulnerabilities
Same weakness: CWE-841
- CVE-2025-36333
Vulnerabilities found in Watson Data Intelligence - CVE-2026-57536
Insufficient validation of payment status in pretix-mollie - CVE-2026-13222
Insufficient validation of payment status in pretix-oppwa - CVE-2026-46540
Nimiq light-blockchain: Light blockchain rebranch issue - CVE-2026-43974
gun HTTP/1.1 client accepts unsolicited 101 Switching Protoc
V. Comments for CVE-2026-13223
No comments yet