Uefa bears "primary responsibility" for the chaotic scenes that "almost led to disaster" before last year's Champions League final between Liverpool and Real Madrid, says an independent report.
Fans were penned in and teargassed outside Paris's Stade de France as kick-off was delayed by 36 minutes.
"It is remarkable no one lost their life," said the report, which Uefa commissioned after the 28 May final.
Uefa and French authorities initially blamed ticketless fans for the events.
The report says there is "no evidence" to support the "reprehensible" claims.
"The panel has concluded that Uefa, as event owner, bears primary responsibility for failures which almost led to disaster," said the report.
While it said there was "contributory fault" from other bodies, the findings said European governing body Uefa was "at the wheel".
"Uefa should have retained a monitoring and oversight role [of security], to ensure it all worked. It self-evidently did not," the report added.
