Revive Revive Adserver vulnerabilities

CVEs per yearBy the year they were published

1. 20191
2. 20231
3. 202516
4. 20265

Newest CVEs

• CVE-2026-21642

  HackerOne community member Patrick Lang (7yr) has reported a reflected XSS vulnerability in the `banner-acl.php` and `channel-acl.php` scripts of Revive…

  Revive · Revive Adserver

  Medium6.1
• CVE-2026-21664

  HackerOne community member Huynh Pham Thanh Luc (nigh7c0r3) has reported a reflected XSS vulnerability in the afr.php delivery script of Revive Adserver. An…

  Revive · Revive Adserver

  Medium6.1
• CVE-2026-21663

  HackerOne community member Patrick Lang (7yr) has reported a reflected XSS vulnerability in the banner-acl.php script of Revive Adserver. An attacker can craft…

  Revive · Revive Adserver

  Medium6.1
• CVE-2026-21640

  HackerOne community member Faraz Ahmed (PakCyberbot) has reported a format string injection in the Revive Adserver settings. When specific character…

  Revive · Revive Adserver

  Low2.7
• CVE-2026-21641

  HackerOne community member Jad Ghamloush (0xjad) has reported an authorization bypass vulnerability in the `tracker-delete.php` script of Revive Adserver.…

  Revive · Revive Adserver

  High7.1
• CVE-2025-55129

  HackerOne community member Kassem S.(kassem_s94) has reported that username handling in Revive Adserver was still vulnerable to impersonation attacks after the…

  Revive · Revive Adserver

  Medium5.4
• CVE-2025-52668

  Improper input neutralization in the stats-conversions.php script in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes potential information…

  Revive · Revive Adserver

  High8.7
• CVE-2025-48986

  Authorization bypass in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an logged in attacker to change other users' email address and potentialy…

  Revive · Revive Adserver

  High8.8
• CVE-2025-48987

  Improper Neutralization of Input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes a potential reflected XSS attack.

  Revive · Revive Adserver

  Medium6.3
• CVE-2025-55123

  Improper neutralization of input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes manager accounts to be able to craft XSS attacks to their own…

  Revive · Revive Adserver

  Low3.5