Vulnerability Description
Our payment integration with GiroCheckout did not properly validate payment status responses. An attacker could use a successful payment status response from one payment and supply it to the system for a different payment, gaining access to multiple valid tickets with only one payment.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-18029?
CVE-2026-18029 is a documented vulnerability. Our payment integration with GiroCheckout did not properly validate payment status responses. An attacker could use a successful payment status response from one payment and supply it to the system ...
How severe is CVE-2026-18029?
CVSS scoring is not yet available for CVE-2026-18029. Check NVD for updates.
Is there a patch for CVE-2026-18029?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.