{"id":"CVE-2026-101275","kind":"vulnerability","aliases":["CVE-2026-101275"],"related":[],"title":"Adyen payment integration accepted one payment's success status for another","description":"Our payment integration with Adyen did not properly validate payment status responses. An attacker could use a successful payment status response from one payment and supply it to the system for a different payment, gaining access to multiple valid tickets with only one payment.","summary":"A ticketing system's integration with the Adyen payment service did not check that a payment status response belonged to the payment being processed. An attacker could reuse a successful status from one payment to obtain multiple valid tickets for the price of one.","severity":"medium","cvss":6.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["adyen","payments","ticketing","vendor"],"not_affected_if":["hosted-payments-without-custom-integration"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T12:17:16+00:00","first_seen_at":"2026-11-10T12:21:52+00:00","triaged_at":"2026-11-10T12:22:40+00:00","updated_at":"2026-11-10T12:22:40+00:00","category":"vendor","confidence":0.5,"triage":{"at":"2026-11-10T12:22:40Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"Adyen payment integration accepted one payment's success status for another","impact":"medium","summary":"A ticketing system's integration with the Adyen payment service did not check that a payment status response belonged to the payment being processed. An attacker could reuse a successful status from one payment to obtain multiple valid tickets for the price of one.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["adyen","payments","ticketing"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"attacker obtains multiple valid tickets while paying once","analyst_note":"Identify the affected vendor product and fixed version from the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-101275.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["hosted-payments-without-custom-integration"],"who_is_affected":"Affects a ticketing or shop application that uses its own Adyen payment integration and trusts payment status responses without matching them to the specific payment. Systems that use Adyen's hosted checkout with verified webhooks, or that do not integrate this way, are not described as affected. The sources do not name the vendor product.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000699,"input_tokens":4510,"output_tokens":496,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-101275':14A,17A '-2026':13A,16A 'accept':4A 'access':101C 'adyen':1A,18B,29B,70C 'anoth':11A 'attack':47B,79C 'belong':40B 'check':34B 'could':48B,80C 'cve':12A,15A 'differ':98C 'gain':100C 'integr':3A,26B,68C 'multipl':58B,103C 'obtain':57B 'one':5A,54B,65B,88C,108C 'payment':2A,6A,19B,30B,37B,43B,55B,67C,75C,84C,89C,99C,109C 'price':63B 'process':45B 'proper':73C 'respons':39B,77C,86C 'reus':49B 'servic':31B 'status':9A,38B,52B,76C,85C 'success':8A,51B,83C 'suppli':91C 'system':24B,95C 'ticket':20B,23B,60B,105C 'use':81C 'valid':59B,74C,104C 'vendor':21B","nicknames":[],"mitigations":[],"who_affected":"Affects a ticketing or shop application that uses its own Adyen payment integration and trusts payment status responses without matching them to the specific payment. Systems that use Adyen's hosted checkout with verified webhooks, or that do not integrate this way, are not described as affected. The sources do not name the vendor product.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["adyen","medium","payments","ticketing","vendor"],"campaign_type":null,"search_a":"'-101275':14A,17A '-2026':13A,16A 'accept':4A 'adyen':1A 'anoth':11A 'cve':12A,15A 'integr':3A 'one':5A 'payment':2A,6A 'status':9A 'success':8A","search_b":"'adyen':18B,29B 'attack':47B 'belong':40B 'check':34B 'could':48B 'integr':26B 'multipl':58B 'obtain':57B 'one':54B,65B 'payment':19B,30B,37B,43B,55B 'price':63B 'process':45B 'respons':39B 'reus':49B 'servic':31B 'status':38B,52B 'success':51B 'system':24B 'ticket':20B,23B,60B 'valid':59B 'vendor':21B","search_c":"'access':101C 'adyen':70C 'attack':79C 'could':80C 'differ':98C 'gain':100C 'integr':68C 'multipl':103C 'one':88C,108C 'payment':67C,75C,84C,89C,99C,109C 'proper':73C 'respons':77C,86C 'status':76C,85C 'success':83C 'suppli':91C 'system':95C 'ticket':105C 'use':81C 'valid':74C,104C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T12:17:16+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"655498c3-6ec5-4f0b-aea6-853b334d05a6","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-101275","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101275","severity":null,"published_at":"2026-11-10T12:17:16+00:00","modified_at":"2026-11-10T12:17:16+00:00","first_seen_at":"2026-11-10T12:21:52+00:00","fetched_at":"2026-11-10T12:21:52+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}