Threats Tagged 'cve-2026-21663'
View all threats tagged with 'cve-2026-21663'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-21663'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-21663 is a reflected Cross-Site Scripting (XSS) vulnerability in the banner-acl.php script of Revive Adserver version 6. An attacker can craft a malicious URL containing an HTML payload that executes when a logged-in administrator visits it, potentially compromising session integrity and enabling unauthorized actions. The vulnerability requires user interaction (administrator clicking the link) but does not require prior authentication to trigger the malicious payload. The CVSS score is 6.1 (medium severity), reflecting the moderate impact on confidentiality and integrity without affecting availability. No known exploits are currently reported in the wild. European organizations using Revive Adserver version 6 should prioritize patching or mitigating this vulnerability to prevent targeted attacks. Countries with high digital advertising activity and significant use of Revive Adserver, such as Germany, the UK, and France, are more likely to be affected. Mitigation includes restricting administrator access to trusted networks, implementing web application firewalls with XSS protections, and educating administrators about phishing risks. Join the discussion | CVE Database V5 | 01/20/2026, 20:48:47 UTC Added: 01/20/2026, 21:05:56 UTC |
Showing 1 to 1 of 1 result