Revive Adserver vulnerabilities

2 known vulnerabilities in Revive Adserver from Revive. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Revive Adserver: Improper Access Control

  CVE-2025-48986Nov 20, 2025Revive

  Authorization bypass in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an logged in attacker to change other users' email address and potentialy take over their accounts using the forgot password functionality.

• 8.8 High severity

  Revive Adserver: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-52664Oct 31, 2025Revive

  SQL injection in Revive Adserver 6.0.0 causes potential disruption or information access when specifically crafted payloads are sent by logged in users