CVE-2026-50743 is a CSRF vulnerability in Revive Adserver 6.0.7's zone-include.php script. The vulnerability arises because the script does not verify the presence or validity of a CSRF token when processing requests to link or unlink banners or campaigns to zones. As a result, an attacker can craft malicious requests that, when executed by an authenticated administrator, perform these actions without their consent. This vulnerability has a CVSS 3.0 base score of 5.4, indicating a medium severity level. No official patch or remediation guidance is currently provided by the vendor, and no known exploits are reported in the wild.

An attacker can cause an authenticated administrator to unknowingly link or unlink banners or campaigns to zones by exploiting the lack of CSRF token verification. This could lead to unauthorized modification of advertising content or campaign configurations. The vulnerability does not impact confidentiality but has limited integrity and availability impact due to unauthorized changes in the adserver configuration.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, administrators should consider implementing additional CSRF protections such as web application firewalls or restricting administrative access to trusted networks. Monitoring for unusual administrative actions may also help detect exploitation attempts.