CVE-2026-101274 | pretix up to 2026.6.3/2026.7.2/2026.8.0 SSO Client response_type improper authorization

October 28, 2026 Yanac

A vulnerability categorized as critical has been discovered in pretix up to 2026.6.3/2026.7.2/2026.8.0. Impacted is an unknown function of the component SSO Client. Executing a manipulation of the argument response_type can lead to improper authorization.

This vulnerability is registered as CVE-2026-101274. It is possible to launch the attack remotely. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More