<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: pretix</title><description>Every new CVE for pretix.</description><link>https://agentprime.io/</link><item><title>CVE-2026-101272: Incorrect session validation for API-created shredder exports</title><link>https://agentprime.io/advisories/CVE-2026-101272/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-101272/</guid><description>CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Oct 2026 10:33:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-101274: Missing authentication in pretix</title><link>https://agentprime.io/advisories/CVE-2026-101274/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-101274/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Oct 2026 10:31:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-101273: Giftcard enumeration</title><link>https://agentprime.io/advisories/CVE-2026-101273/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-101273/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Oct 2026 10:29:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-101271: OAuth credentials not disabled when application is disabled</title><link>https://agentprime.io/advisories/CVE-2026-101271/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-101271/</guid><description>CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 29 Sep 2026 12:03:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-101270: HTML injection</title><link>https://agentprime.io/advisories/CVE-2026-101270/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-101270/</guid><description>CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 29 Sep 2026 12:02:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-101269: Incorrect session validation for API-uploaded files</title><link>https://agentprime.io/advisories/CVE-2026-101269/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-101269/</guid><description>CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 29 Sep 2026 12:01:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-101268: Customer session fixation</title><link>https://agentprime.io/advisories/CVE-2026-101268/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-101268/</guid><description>CVSS 1.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 29 Sep 2026 12:00:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-101267: Revenue information leak</title><link>https://agentprime.io/advisories/CVE-2026-101267/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-101267/</guid><description>CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 29 Sep 2026 11:59:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-101266: Checkout validation bypass</title><link>https://agentprime.io/advisories/CVE-2026-101266/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-101266/</guid><description>CVSS 1.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 29 Sep 2026 11:53:52 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-18028: Missing authorization check in event quick setup view</title><link>https://agentprime.io/advisories/CVE-2026-18028/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-18028/</guid><description>CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 28 Jul 2026 10:39:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-13602: Session takeover vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-13602/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-13602/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 01 Jul 2026 13:45:30 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-57532: Cross-site scripting in pretix</title><link>https://agentprime.io/advisories/CVE-2026-57532/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-57532/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 Jun 2026 14:32:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-57533: Cross-site scripting in pretix</title><link>https://agentprime.io/advisories/CVE-2026-57533/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-57533/</guid><description>CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 Jun 2026 14:31:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-57535: Cross-site scripting in pretix</title><link>https://agentprime.io/advisories/CVE-2026-57535/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-57535/</guid><description>CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 Jun 2026 14:29:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-13225: Stored XSS in ticket confirmation page</title><link>https://agentprime.io/advisories/CVE-2026-13225/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-13225/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 Jun 2026 14:26:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-11764: Data exposed without proper permission</title><link>https://agentprime.io/advisories/CVE-2026-11764/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-11764/</guid><description>CVSS 3.6 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 Jun 2026 11:54:37 GMT</pubDate><category>CVE</category></item></channel></rss>