Vulnerability Description
Our payment integration with Oppwa-based payment methods did not properly validate payment status responses. An attacker could use a successful payment status response from one payment and supply it to the system for a different payment, gaining access to multiple valid tickets with only one payment.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-13222?
CVE-2026-13222 is a documented vulnerability. Our payment integration with Oppwa-based payment methods did not properly validate payment status responses. An attacker could use a successful payment status response from one payment and supply it...
How severe is CVE-2026-13222?
CVSS scoring is not yet available for CVE-2026-13222. Check NVD for updates.
Is there a patch for CVE-2026-13222?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.