PatchTheCVErevive adserver vulnerabilities and fixes
Recent CVEs affecting revive adserver, with upgrade or downgrade steps. 6 tracked.
Also searched as: reviveadserver.
revive adserver has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2026-06-26. Highest priority: CVE-2026-50741 (score 54/100).
- CVE-2026-50741 HIGH 8.8 UPGRADE Bypass to the fix for CVE-2026-34916
- CVE-2026-50745 MEDIUM 6.1 UPGRADE A missing sanitisation vulnerability exists with user input in the stats-video.php script
- CVE-2026-50740 MEDIUM 5.4 UPGRADE A missing sanitisation vulnerability of user input in the zone-include.php script exists in Revive Adserver 6.
- CVE-2026-50742 MEDIUM 5.4 UPGRADE A stored XSS vulnerabilities exists in the `maintenance-acl-check.php` and `maintenance-banners-check.php` too
- CVE-2026-50739 MEDIUM 4.3 UPGRADE A bypass for CVE‑2026‑34913 exists with proper ownership validation that had not been applied to the reverse o
- CVE-2026-50744 MEDIUM 4.3 UPGRADE A bypass to the admin‑only restriction of the XML‑RPC API in Revive Adserver 6.0.7
FAQ
How do I fix revive adserver vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is revive adserver being exploited right now?
None of the tracked revive adserver CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which revive adserver CVE should I patch first?
CVE-2026-50741 currently ranks highest (54/100): Bypass to the fix for CVE-2026-34916.