Revive Adserver vulnerabilities

2 known vulnerabilities in Revive Adserver from Revive-adserver. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Adserver: Improper Control of Generation of Code

  CVE-2026-50741Jun 26, 2026ReviveEPSS 4.94%

  Bypass to the fix for CVE-2026-34916. Variants of such vectors have been also reported by phucrio and offsetmd. The fix can be bypassed either by sending a disallowed but otherwise valid plugin identifier as `type`, or using the `ox.setChannelTargeting` XML-RP

• 8.8 High severity

  Revive Adserver: Improper Control of Generation of Code

  CVE-2026-34916Jun 23, 2026Revive-adserver

  A missing validation of user input when saving delivery limitations in Revive Adserver 6.0.6 and earlier could allow a low‑privileged user to use the logical parameter to inject malicious PHP code into the compiledlimitations field on the database and have it