By vendor

Revive-Adserver vulnerabilities

Known CVEs affecting Revive-Adserver products, prioritized by severity, with SEC.co remediation and detection guidance.

6 published vulnerabilities

• CVE-2026-50741HIGH 8.8

  CVE-2026-50741 is a critical security weakness in Revive Adserver that allows authenticated users to bypass a previous security patch (CVE-2026-34916). An attacker with valid login credentials can exploit this vulnerability in two ways: by submitting a specially crafted but technically valid plugin identifier, or by leveraging the XML-RPC API method `ox.setChannelTargeting`. Both approaches circumvent the intended restrictions and grant unauthorized access to sensitive functions. The vulnerability requires authentication but presents a severe risk because authenticated users—including lower-privileged accounts or compromised credentials—can achieve high-impact outcomes.

• CVE-2026-50745MEDIUM 6.1

  A cross-site scripting vulnerability exists in Revive Adserver's stats-video.php script. The application fails to properly sanitize and encode user-supplied input before displaying it back to visitors. An attacker could craft a malicious link that, when clicked by a user, executes arbitrary JavaScript in the context of the affected domain. This is a reflected XSS vulnerability—the payload doesn't persist on the server, but requires social engineering to trick a user into clicking a specially crafted URL.

• CVE-2026-50740MEDIUM 5.4

  Revive Adserver versions 6.0.7 and earlier contain a reflected cross-site scripting (XSS) vulnerability in the zone-include.php script. An authenticated user with low-level privileges can inject malicious code through the refresh parameter of the iFrame invocation tag, which is then executed in the browsers of other users who view affected content. This does not require administrator access, making it accessible to ordinary users within an organization running the platform.

• CVE-2026-50742MEDIUM 5.4

  Revive Adserver 6.0.7 contains a stored cross-site scripting (XSS) vulnerability in two administrative maintenance tools: `maintenance-acl-check.php` and `maintenance-banners-check.php`. When these tools detect inconsistencies in the system, they display entity names without properly escaping them first. This allows an attacker to inject malicious JavaScript that gets stored and executed in an administrator's browser when they use these tools. Execution depends on an admin actually running the maintenance checks, which the attacker cannot directly control.

• CVE-2026-50739MEDIUM 4.3

  A flaw in Revive Adserver allows low-privileged users to associate their tracking tools with advertising campaigns owned by other managers on the same server. This happens because a security fix applied to one direction of the linking process was not extended to the reverse operation, creating an inconsistency that attackers can exploit. The vulnerability affects Revive Adserver version 6.0.7 and earlier.

• CVE-2026-50744MEDIUM 4.3

  Revive Adserver 6.0.7 contains a flaw in its XML-RPC authentication system. When an administrator login attempt is made via the ox.login API method, the server returns an error message—as intended—but inadvertently creates a valid session ID and sends it back in the HTTP response headers anyway. An attacker with basic API access can intercept this session ID and use it to bypass the admin-only restriction, gaining unrestricted access to sensitive API functions without needing actual admin credentials.