CVE-2026-50742mediumCWE-79

CVE-2026-50742: falha de média gravidade em Revive Adserver

Publicada em

Seguir esta CVE+ Monitorar Revive Adserver

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.4epss 0.3%
A stored XSS vulnerabilities exists in the `maintenance-acl-check.php` and `maintenance-banners-check.php` tools of Revive Adserver 6.0.7. The issue was caused by entity names being displayed without proper escaping when inconsistencies were detected. Whether the XSS payload is executed when an administrator uses the affected maintenance tools is not entirely under the attacker's control.
CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N
Produtos afetados
Revive · Adserver
CVEs relacionadas — Revive Adserver

No mesmo produto, das mais perigosas para as menos.

CVE-2026-50741HIGHCVE-2026-50741EPSS 4.9%CVE-2026-44959HIGHCVE-2026-44959EPSS 0.6%CVE-2026-50739MEDIUMCVE-2026-50739EPSS 0.5%CVE-2026-44961NONECVE-2026-44961EPSS 0.4%CVE-2026-44956NONECVE-2026-44956EPSS 0.4%CVE-2026-44960NONECVE-2026-44960EPSS 0.4%