Threat Intelligence Database

CVE-2026-21642 is a reflected Cross-Site Scripting (XSS) vulnerability found in Revive Adserver version 6, specifically in the banner-acl.php and channel-acl.php scripts. An attacker can craft a malicious URL containing HTML/JavaScript payloads that, when visited by a logged-in administrator, executes arbitrary scripts in their browser. This vulnerability requires user interaction (administrator clicking the URL) but does not require prior authentication to trigger the malicious URL. The CVSS 3.0 base score is 6.1 (medium severity), reflecting limited confidentiality and integrity impact but no availability impact. No known exploits are currently reported in the wild. European organizations using Revive Adserver 6 should prioritize patching or mitigating this issue to prevent potential administrative account compromise or session hijacking.

MediumVulnerabilityGermanyFranceNetherlands+2#cve#cve-2026-21642

CVE-2026-21664 is a reflected Cross-Site Scripting (XSS) vulnerability in the afr.php delivery script of Revive Adserver version 6. An attacker can craft a malicious URL containing an HTML payload that, when visited by a logged-in administrator, executes arbitrary scripts in the administrator's browser. This vulnerability requires user interaction and affects confidentiality and integrity but not availability. No known exploits are currently in the wild. The vulnerability has a CVSS 3.0 score of 6.1, indicating medium severity. European organizations using Revive Adserver 6 should prioritize patching or mitigating this issue to prevent potential administrative account compromise or session hijacking. Countries with significant digital advertising sectors and high usage of Revive Adserver are at greater risk.

MediumVulnerabilityGermanyFranceNetherlands+4#cve#cve-2026-21664

CVE-2026-21663 is a reflected Cross-Site Scripting (XSS) vulnerability in the banner-acl.php script of Revive Adserver version 6. An attacker can craft a malicious URL containing an HTML payload that executes when a logged-in administrator visits it, potentially compromising session integrity and enabling unauthorized actions. The vulnerability requires user interaction (administrator clicking the link) but does not require prior authentication to trigger the malicious payload. The CVSS score is 6.1 (medium severity), reflecting the moderate impact on confidentiality and integrity without affecting availability. No known exploits are currently reported in the wild. European organizations using Revive Adserver version 6 should prioritize patching or mitigating this vulnerability to prevent targeted attacks. Countries with high digital advertising activity and significant use of Revive Adserver, such as Germany, the UK, and France, are more likely to be affected. Mitigation includes restricting administrator access to trusted networks, implementing web application firewalls with XSS protections, and educating administrators about phishing risks.

MediumVulnerabilityGermanyFranceNetherlands+3#cve#cve-2026-21663

HackerOne community member Jad Ghamloush (0xjad) has reported an authorization bypass vulnerability in the `tracker-delete.php` script of Revive Adserver. Users with permissions to delete trackers are mistakenly allowed to delete trackers owned by other accounts.

HighVulnerabilityUnited KingdomGermanyFrance+4#cve#cve-2026-21641

HackerOne community member Kassem S.(kassem_s94) has reported that username handling in Revive Adserver was still vulnerable to impersonation attacks after the fix for CVE-2025-52672, via several alternate techniques. Homoglyphs based impersonation has been independently reported by other HackerOne users, such as itz_hari_ and khoof.

MediumVulnerabilityGermanyFranceUnited Kingdom+3#cve#cve-2025-55129

Authorization bypass in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an logged in attacker to change other users' email address and potentialy take over their accounts using the forgot password functionality.

HighVulnerabilityGermanyFranceUnited Kingdom+4#cve#cve-2025-48986

Debug information disclosure in the SQL error message to in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes non-admin users to acquire information about the software, PHP and database versions currently in use.

MediumVulnerabilityGermanyUnited KingdomFrance+4#cve#cve-2025-52671

Improper neutralisation of input in Revive Adserver 6.0.0+ causes a reflected XSS attack in the banner-zone.php script.

MediumVulnerabilityGermanyFranceUnited Kingdom+4#cve#cve-2025-55124

HackerOne community member Dang Hung Vi (vidang04) has reported a stored XSS vulnerability involving the navigation box at the top of advertiser-related pages, with campaign names being the vector for the stored XSS

MediumVulnerabilityGermanyUnited KingdomFrance+4#cve#cve-2025-55126

HackerOne community member Dao Hoang Anh (yoyomiski) has reported an improper neutralization of whitespace in the username when adding new users. A username with leading or trailing whitespace could be virtually indistinguishable from its legitimate counterpart when the username is displayed in the UI, potentially leading to confusion.

MediumVulnerabilityGermanyUnited KingdomFrance+3#cve#cve-2025-55127