CVE-2026-50741

概要

参考情報

• hackerone.com/reports/3780854 · Issue Tracking
• hackerone.com/reports/3781492 · Issue Tracking

revive adserver のその他の脆弱性

• CVE-2026-50745中 6.1A missing sanitisation vulnerability exists with user input in the stats-video.php script. The way URLs to this script were constructed did …
• CVE-2026-50744中 4.3A bypass to the admin‑only restriction of the XML‑RPC API in Revive Adserver 6.0.7. The API response for the ox.login method returned a sess…
• CVE-2026-50742中 5.4A stored XSS vulnerabilities exists in the `maintenance-acl-check.php` and `maintenance-banners-check.php` tools of Revive Adserver 6.0.7. T…
• CVE-2026-50740中 5.4A missing sanitisation vulnerability of user input in the zone-include.php script exists in Revive Adserver 6.0.7 and earlier. A low‑privile…
• CVE-2026-50739中 4.3A bypass for CVE‑2026‑34913 exists with proper ownership validation that had not been applied to the reverse operation of linking campaigns …