CVE-2026-101267
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Sep 29, 2026
Vendor
unknown
Description
A missing permission check allowed low-privileged users with access to an event but without access to the event's orders to extract some specific information. This information includes the number of attendees and the total revenue.