HIGH SeverityCVSS 4.07.3CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:H/SI:H/SA:H
CVE-2026-5599
Last updated Apr 05, 2026 · Published Apr 05, 2026
Description
A user with API access and "manage users" permission in any venueless world is able to trigger deletion of user accounts in other worlds.
Affected products
1 listed- pretix:Venueless
Mappings
CWE
CWE-653
CAPEC
CAPEC-115
CVE® content © MITRE Corporation. Licensed under the CVE Terms of Use. Terms