Threat database

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	2.7	EPSS 0.3%	CVE-2026-21640Revive Adserver · Vulnerability Low2.7EPSS 0.3%2026-01-20CVE Database V5CVE-2026-21640 HackerOne community member Faraz Ahmed (PakCyberbot) has reported a format string injection in the Revive Adserver settings. When specific character combinations are used in a setting, the admin user console could be disabled due to a fatal PHP error. EPSS 0.3%Vulnerability Revive	CVE Database V5	2026-01-20
Low	2.7	EPSS 0.5%	CVE-2025-52666Revive Adserver · Vulnerability Low2.7EPSS 0.5%2025-11-20CVE Database V5CVE-2025-52666 Improper neutralisation of format characters in the settings of Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an administrator user to disable the admin user console due to a fatal PHP error. EPSS 0.5%Vulnerability Revive	CVE Database V5	2025-11-20

Page 1 of 1