Revive vulnerabilities, page 3
43 vulnerabilities
Known vulnerabilities in Revive products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3 products.
CVE-2026-50745revive-adserverrevive_adserver+1
EPSS score0.38%
A missing sanitisation vulnerability exists with user input in the stats-video.php script. The way URLs to this script were constructed did not follow best practices, and the output of the Smarty custom helper function url was neither properly encoded nor sanitised, allowing user‑supplied input to be reflected without escaping.CVE-2023-26756reviveadserverEPSS score1.15%
The login page of Revive Adserver v5.4.1 is vulnerable to brute force attacks. NOTE: The vendor's position is that this is effectively mitigated by rate limits and password-quality features.CVE-2023-38040revive-adserverrevive_adserver+1EPSS score2.07%
A reflected XSS vulnerability exists in Revive Adserver 5.4.1 and earlier versions..