CVE-2026-27406: Joe Dolson My Tickets

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Insertion of Sensitive Information Into Sent Data vulnerability in Joe Dolson My Tickets my-tickets allows Retrieve Embedded Sensitive Data.This issue affects My Tickets: from n/a through <= 2.1.0.

Affected products

• Joe Dolson My Tickets: up to and including 2.1.0

Published 2026-03-05. Last modified 2026-06-17.