Revive Adserver vulnerabilities

Newest CVEs

• CVE-2026-50743

  A CSRF vulnerability exists in the `zone-include.php` script in Revive Adserver 6.0.7. Linking and unlinking banners or campaigns to zones could be triggered…

  Revive · Adserver

  Medium5.4
• CVE-2026-50745

  A missing sanitisation vulnerability exists with user input in the stats-video.php script. The way URLs to this script were constructed did not follow best…

  Revive · Adserver

  Medium4.7
• CVE-2026-50740

  A missing sanitisation vulnerability of user input in the zone-include.php script exists in Revive Adserver 6.0.7 and earlier. A low‑privileged user could…

  Revive · Adserver

  Medium6.1
• CVE-2026-50742

  A stored XSS vulnerabilities exists in the `maintenance-acl-check.php` and `maintenance-banners-check.php` tools of Revive Adserver 6.0.7. The issue was caused…

  Revive · Adserver

  Medium4.4
• CVE-2026-50741

  Bypass to the fix for CVE-2026-34916. Variants of such vectors have been also reported by phucrio and offsetmd. The fix can be bypassed either by sending a…

  Revive · Adserver

  High8.8
• CVE-2026-50739

  A bypass for CVE‑2026‑34913 exists with proper ownership validation that had not been applied to the reverse operation of linking campaigns and trackers…

  Revive · Adserver

  Medium4.3
• CVE-2026-50744

  A bypass to the admin‑only restriction of the XML‑RPC API in Revive Adserver 6.0.7. The API response for the ox.login method returned a session ID cookie in…

  Revive · Adserver

  Medium4.3
• CVE-2026-34913

  A missing access control check when linking trackers to campaigns through the campaign-trackers.php script of Revive Adserver 6.0.6 and earlier could allow a…

  Revive · Adserver

  Medium4.3
• CVE-2026-34917

  Low‑privileged session IDs generated for the web admin console could be reused in the XML‑RPC API, whose authentication is normally restricted to admin users.…

  Revive · Adserver

  Medium4.3
• CVE-2026-44956

  Low‑privileged users could use their Full Name as a vector for a stored XSS attack. The name is included in system‑generated emails, whose content is stored in…

  Revive · Adserver

  None0.0