Revive Adserver
Vendor:
First CVE: Nov 20, 2025 · Active for under a year
9
Total CVEs
More Total CVEs than 86% of tracked products
4.5
Avg CVEs / Year
Higher CVE frequency than 86% of tracked products
5.7
Avg CVSS
Higher Avg CVSS than 17% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Revive Adserver over time
Volume of CVEsAvg CVSS Base Score
First CVE
Nov 20, 2025
8 months ago
Most Recent CVE
Jan 20, 2026
185 days ago
CVE Severity & Scoring
Revive Adserver9 CVEs
11%
89%
All CVEs352,231 CVEs
45%
40%
11%
LowMedium
Attack Vector
Local0 (0.0%)
Network9 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low9 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None6 (66.7%)
Unknown0 (0.0%)
Required3 (33.3%)
Privileges Required
Low4 (44.4%)
High1 (11.1%)
None4 (44.4%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (9 CVEs).
9 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-21664MEDIUM HackerOne community member Huynh Pham Thanh Luc (nigh7c0r3) has reported a reflected XSS vulnerability in the afr.php delivery script of Revive Adserver. An attacker can craft a sp | Jan 20, 2026 | 6.1 | 24 | NO | NO |
CVE-2026-21641MEDIUM HackerOne community member Jad Ghamloush (0xjad) has reported an authorization bypass vulnerability in the `tracker-delete.php` script of Revive Adserver. Users with permissions to | Jan 20, 2026 | 6.5 | 23 | NO | NO |
CVE-2025-55128MEDIUM HackerOne community member Dang Hung Vi (vidang04) has reported an uncontrolled resource consumption vulnerability in the “userlog-index.php”. An attacker with access to the admin | Nov 20, 2025 | 6.5 | 22 | NO | NO |
CVE-2025-55126MEDIUM HackerOne community member Dang Hung Vi (vidang04) has reported a stored XSS vulnerability involving the navigation box at the top of advertiser-related pages, with campaign names | Nov 20, 2025 | 6.5 | 22 | NO | NO |
CVE-2025-55129MEDIUM HackerOne community member Kassem S.(kassem_s94) has reported that username handling in Revive Adserver was still vulnerable to impersonation attacks after the fix for CVE-2025-526 | Dec 2, 2025 | 5.4 | 21 | NO | NO |
CVE-2026-21663MEDIUM HackerOne community member Patrick Lang (7yr) has reported a reflected XSS vulnerability in the banner-acl.php script of Revive Adserver. An attacker can craft a specific URL that | Jan 20, 2026 | 6.1 | 19 | NO | NO |
CVE-2026-21642MEDIUM HackerOne community member Patrick Lang (7yr) has reported a reflected XSS vulnerability in the `banner-acl.php` and `channel-acl.php` scripts of Revive Adserver. An attacker can c | Jan 20, 2026 | 6.1 | 19 | NO | NO |
CVE-2025-55127MEDIUM HackerOne community member Dao Hoang Anh (yoyomiski) has reported an improper neutralization of whitespace in the username when adding new users. A username with leading or trailin | Nov 20, 2025 | 5.4 | 19 | NO | NO |
HackerOne community member Faraz Ahmed (PakCyberbot) has reported a format string injection in the Revive Adserver settings. When specific character combinations are used in a sett | Jan 20, 2026 | 2.7 | 15 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (9 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (9 CVEs).
Media Mentions
Signals from CVEs in this product scope (9 CVEs).
Top CNAs Publishing CVEs For Revive Adserver
Top CWEs
Versions
No cataloged versions.