GCVE-1988-2026-0565

Vulnerability from gna-1988 – Published: 2026-11-13 02:14 – Updated: 2026-11-13 02:14
VLAI
Title
[REVIVE-SA-2026-004] Revive Adserver Vulnerabilities
Summary
======================================================================== Revive Adserver Security Advisory REVIVE-SA-2026-004 ------------------------------------------------------------------------ https://www.revive-adserver.com/security/revive-sa-2026-004 ------------------------------------------------------------------------ Date: 2026-11-11 Risk Level: Medium to High Applications affected: Revive Adserver Versions affected: <= 6.0.8 Versions not affected: >= 6.0.9 Website: https://www.revive-adserver.com/ ======================================================================== ======================================================================== 1. Blind SQL injection through inconsistent request precedence ======================================================================== Vulnerability Type: CWE-89: SQL Injection CVE-ID: CVE-2026-107662 Risk level: High CVSS Base Score: 8.8 CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H ------------------------------------------------------------------------ Description ----------- Resolution ---------- References ---------- https://hackerone.com/reports/3896779 https://github.com/revive-adserver/revive-adserver/commit/e301dbbb7 https://github.com/revive-adserver/revive-adserver/commit/0aa9d0124 https://cwe.mitre.org/data/definitions/89.html ======================================================================== 2. Authorization bypass through inconsistent request precedence ======================================================================== CVE-ID: CVE-2026-107247 Risk level: High CVSS Base Score: 8.1 CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N ------------------------------------------------------------------------ Description ----------- Resolution ---------- References ---------- https://hackerone.com/reports/3831102 https://github.com/revive-adserver/revive-adserver/commit/e301dbbb7 https://github.com/revive-adserver/revive-adserver/commit/156dee7bc https://cwe.mitre.org/data/definitions/639.html ======================================================================== 3. Reflected XSS in conversion statistics ======================================================================== Vulnerability Type: CWE-79: Cross-site Scripting CVE-ID: CVE-2026-108558 Risk level: Medium CVSS Base Score: 6.1 CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N ------------------------------------------------------------------------ Description ----------- Resolution ---------- References ---------- https://hackerone.com/reports/3878649 https://github.com/revive-adserver/revive-adserver/commit/b9fd9b04b https://cwe.mitre.org/data/definitions/79.html ======================================================================== 4. Reflected XSS in iframe invocation dimensions ======================================================================== Vulnerability Type: CWE-79: Cross-site Scripting CVE-ID: CVE-2026-108559 Risk level: Medium CVSS Base Score: 6.1 CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N ------------------------------------------------------------------------ Description ----------- Resolution ---------- References ---------- https://hackerone.com/reports/3908050 https://github.com/revive-adserver/revive-adserver/commit/9643f44dc https://cwe.mitre.org/data/definitions/79.html ======================================================================== 5. Unauthenticated reflected XSS in update history ======================================================================== Vulnerability Type: CWE-79: Cross-site Scripting CVE-ID: CVE-2026-108560 Risk level: Medium CVSS Base Score: 6.1 CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N ------------------------------------------------------------------------ Description ----------- Resolution ---------- References ---------- https://hackerone.com/reports/4075098 https://github.com/revive-adserver/revive-adserver/commit/770130171 https://github.com/revive-adserver/revive-adserver/commit/8c449079d https://cwe.mitre.org/data/definitions/79.html ======================================================================== 6. Session-stored XSS in report date selection ======================================================================== Vulnerability Type: CWE-79: Cross-site Scripting CVE-ID: CVE-2026-108561 Risk level: Medium CVSS Base Score: 6.1 CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N ------------------------------------------------------------------------ Description ----------- Resolution ---------- References ---------- https://hackerone.com/reports/4116433 https://github.com/revive-adserver/revive-adserver/commit/cce8a4081 https://cwe.mitre.org/data/definitions/79.html ======================================================================== 7. Stored XSS in tracker maintenance ======================================================================== Vulnerability Type: CWE-79: Cross-site Scripting CVE-ID: CVE-2026-108562 Risk level: Medium CVSS Base Score: 5.4 CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N ------------------------------------------------------------------------ Description ----------- Resolution ---------- References ---------- https://hackerone.com/reports/3826207 https://github.com/revive-adserver/revive-adserver/commit/ae0bbc4b3 https://cwe.mitre.org/data/definitions/79.html ======================================================================== 8. Campaign-zone linking without ownership validation ======================================================================== CVE-ID: CVE-2026-68486 Risk level: Medium CVSS Base Score: 5.4 CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N ------------------------------------------------------------------------ Description ----------- Resolution ---------- References ---------- https://hackerone.com/reports/3958112 https://github.com/revive-adserver/revive-adserver/commit/8fc49ab1d https://github.com/revive-adserver/revive-adserver/commit/f0ab01a02 https://cwe.mitre.org/data/definitions/639.html ======================================================================== 9. Formula injection in conversion-report XLS exports ======================================================================== Vulnerability Type: CWE-94: Code Injection CVE-ID: CVE-2026-108563 Risk level: Medium CVSS Base Score: 4.7 CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N ------------------------------------------------------------------------ Description ----------- Resolution ---------- References ---------- https://hackerone.com/reports/3859000 https://github.com/revive-adserver/revive-adserver/commit/1e4d48b18 https://cwe.mitre.org/data/definitions/94.html ======================================================================== 10. Reflected XSS in direct-selection invocation options ======================================================================== Vulnerability Type: CWE-79: Cross-site Scripting CVE-ID: CVE-2026-108564 Risk level: Medium CVSS Base Score: 4.7 CVSS Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N ------------------------------------------------------------------------ Description ----------- Resolution ---------- References ---------- https://hackerone.com/reports/3942028 https://github.com/revive-adserver/revive-adserver/commit/cb8fdeddf https://cwe.mitre.org/data/definitions/79.html ======================================================================== 11. Reflected XSS in popup invocation options ======================================================================== Vulnerability Type: CWE-79: Cross-site Scripting CVE-ID: CVE-2026-108565 Risk level: Medium CVSS Base Score: 4.7 CVSS Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N ------------------------------------------------------------------------ Description ----------- Resolution ---------- References ---------- https://hackerone.com/reports/3971985 https://github.com/revive-adserver/revive-adserver/commit/2275165e0 https://cwe.mitre.org/data/definitions/79.html ======================================================================== 12. Cross-agency website-list disclosure ======================================================================== CVE-ID: CVE-2026-68485 Risk level: Medium CVSS Base Score: 4.3 CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N ------------------------------------------------------------------------ Description ----------- Resolution ---------- References ---------- https://hackerone.com/reports/3883840 https://github.com/revive-adserver/revive-adserver/commit/42df0608e https://cwe.mitre.org/data/definitions/639.html ======================================================================== 13. Cross-agency delivery rule set creation ======================================================================== CVE-ID: CVE-2026-82978 Risk level: Medium CVSS Base Score: 4.3 CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N ------------------------------------------------------------------------ Description ----------- Resolution ---------- References ---------- https://hackerone.com/reports/3929216 https://hackerone.com/reports/3883840 https://github.com/revive-adserver/revive-adserver/commit/cabeb2e53 https://cwe.mitre.org/data/definitions/639.html ======================================================================== 14. Cross-site request forgery in tracker invocation ======================================================================== Vulnerability Type: CWE-352: Cross-Site Request Forgery CVE-ID: CVE-2026-77168 Risk level: Medium CVSS Base Score: 4.3 CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N ------------------------------------------------------------------------ Description ----------- Resolution ---------- References ---------- https://hackerone.com/reports/3981932 https://github.com/revive-adserver/revive-adserver/commit/a4593a679 https://cwe.mitre.org/data/definitions/352.html ======================================================================== Solution ======================================================================== ======================================================================== Contact Information ======================================================================== The security contact for Revive Adserver can be reached at: <security AT revive-adserver DOT com>. Please review https://www.revive-adserver.com/security/ before doing so. -- Matteo Beccati On behalf of the Revive Adserver Team https://www.revive-adserver.com/ _______________________________________________ Sent through the Full Disclosure mailing list https://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: https://seclists.org/fulldisclosure/
Severity
No CVSS data available.
CWE
Assigner
VULNARCHIVE GNA GNA-1988
GNA scorecard E 38/100 over 576 records in the last 180 days details
References
URL Tags
https://vuln.freearchive.org/archive/full-disclos… technical-description
https://seclists.org/fulldisclosure/2026/Nov/23 technical-description
https://cwe.mitre.org/data/definitions/352.html
https://cwe.mitre.org/data/definitions/639.html
https://cwe.mitre.org/data/definitions/79.html
https://cwe.mitre.org/data/definitions/89.html
https://cwe.mitre.org/data/definitions/94.html
https://github.com/revive-adserver/revive-adserve…
https://github.com/revive-adserver/revive-adserve…
https://github.com/revive-adserver/revive-adserve…
https://github.com/revive-adserver/revive-adserve…
https://github.com/revive-adserver/revive-adserve…
https://github.com/revive-adserver/revive-adserve…
https://github.com/revive-adserver/revive-adserve…
https://github.com/revive-adserver/revive-adserve…
https://github.com/revive-adserver/revive-adserve…
https://github.com/revive-adserver/revive-adserve…
https://github.com/revive-adserver/revive-adserve…
https://github.com/revive-adserver/revive-adserve…
https://github.com/revive-adserver/revive-adserve…
https://github.com/revive-adserver/revive-adserve…
https://github.com/revive-adserver/revive-adserve…
https://github.com/revive-adserver/revive-adserve…
https://github.com/revive-adserver/revive-adserve…
https://hackerone.com/reports/3826207
https://hackerone.com/reports/3831102
https://hackerone.com/reports/3859000
https://hackerone.com/reports/3878649
https://hackerone.com/reports/3883840
https://hackerone.com/reports/3896779
https://hackerone.com/reports/3908050
https://hackerone.com/reports/3929216
https://hackerone.com/reports/3942028
https://hackerone.com/reports/3958112
https://hackerone.com/reports/3971985
https://hackerone.com/reports/3981932
https://hackerone.com/reports/4075098
https://hackerone.com/reports/4116433
https://nmap.org/mailman/listinfo/fulldisclosure
https://seclists.org/fulldisclosure/
https://www.revive-adserver.com/
https://www.revive-adserver.com/security/
https://www.revive-adserver.com/security/revive-s…
Impacted products
Vendor Product Version CPE status
unknown Revive Adserver Vulnerabilities Affected: unknown
guessed Create a notification for this product.
Credits
Matteo Beccati
Relationships
reference GCVE-1988-2026-0565 (this record)
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Revive Adserver Vulnerabilities",
          "vendor": "unknown",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Matteo Beccati"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "========================================================================\nRevive Adserver Security Advisory                     REVIVE-SA-2026-004\n------------------------------------------------------------------------\nhttps://www.revive-adserver.com/security/revive-sa-2026-004\n------------------------------------------------------------------------\nDate:                  2026-11-11\nRisk Level:            Medium to High\nApplications affected: Revive Adserver\nVersions affected:     \u003c= 6.0.8\nVersions not affected: \u003e= 6.0.9\nWebsite:               https://www.revive-adserver.com/\n========================================================================\n\n\n========================================================================\n1. Blind SQL injection through inconsistent request precedence\n========================================================================\nVulnerability Type:    CWE-89: SQL Injection\nCVE-ID:                CVE-2026-107662\nRisk level:            High\nCVSS Base Score:       8.8\nCVSS Vector:           CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n------------------------------------------------------------------------\n\nDescription\n-----------\n\n\nResolution\n----------\n\n\nReferences\n----------\nhttps://hackerone.com/reports/3896779\nhttps://github.com/revive-adserver/revive-adserver/commit/e301dbbb7\nhttps://github.com/revive-adserver/revive-adserver/commit/0aa9d0124\nhttps://cwe.mitre.org/data/definitions/89.html\n\n\n========================================================================\n2. Authorization bypass through inconsistent request precedence\n========================================================================\n\nCVE-ID:                CVE-2026-107247\nRisk level:            High\nCVSS Base Score:       8.1\nCVSS Vector:           CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N\n------------------------------------------------------------------------\n\nDescription\n-----------\n\n\nResolution\n----------\n\n\nReferences\n----------\nhttps://hackerone.com/reports/3831102\nhttps://github.com/revive-adserver/revive-adserver/commit/e301dbbb7\nhttps://github.com/revive-adserver/revive-adserver/commit/156dee7bc\nhttps://cwe.mitre.org/data/definitions/639.html\n\n\n========================================================================\n3. Reflected XSS in conversion statistics\n========================================================================\nVulnerability Type:    CWE-79: Cross-site Scripting\nCVE-ID:                CVE-2026-108558\nRisk level:            Medium\nCVSS Base Score:       6.1\nCVSS Vector:           CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N\n------------------------------------------------------------------------\n\nDescription\n-----------\n\n\nResolution\n----------\n\n\nReferences\n----------\nhttps://hackerone.com/reports/3878649\nhttps://github.com/revive-adserver/revive-adserver/commit/b9fd9b04b\nhttps://cwe.mitre.org/data/definitions/79.html\n\n\n========================================================================\n4. Reflected XSS in iframe invocation dimensions\n========================================================================\nVulnerability Type:    CWE-79: Cross-site Scripting\nCVE-ID:                CVE-2026-108559\nRisk level:            Medium\nCVSS Base Score:       6.1\nCVSS Vector:           CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N\n------------------------------------------------------------------------\n\nDescription\n-----------\n\n\nResolution\n----------\n\n\nReferences\n----------\nhttps://hackerone.com/reports/3908050\nhttps://github.com/revive-adserver/revive-adserver/commit/9643f44dc\nhttps://cwe.mitre.org/data/definitions/79.html\n\n\n========================================================================\n5. Unauthenticated reflected XSS in update history\n========================================================================\nVulnerability Type:    CWE-79: Cross-site Scripting\nCVE-ID:                CVE-2026-108560\nRisk level:            Medium\nCVSS Base Score:       6.1\nCVSS Vector:           CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N\n------------------------------------------------------------------------\n\nDescription\n-----------\n\n\nResolution\n----------\n\n\nReferences\n----------\nhttps://hackerone.com/reports/4075098\nhttps://github.com/revive-adserver/revive-adserver/commit/770130171\nhttps://github.com/revive-adserver/revive-adserver/commit/8c449079d\nhttps://cwe.mitre.org/data/definitions/79.html\n\n\n========================================================================\n6. Session-stored XSS in report date selection\n========================================================================\nVulnerability Type:    CWE-79: Cross-site Scripting\nCVE-ID:                CVE-2026-108561\nRisk level:            Medium\nCVSS Base Score:       6.1\nCVSS Vector:           CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N\n------------------------------------------------------------------------\n\nDescription\n-----------\n\n\nResolution\n----------\n\n\nReferences\n----------\nhttps://hackerone.com/reports/4116433\nhttps://github.com/revive-adserver/revive-adserver/commit/cce8a4081\nhttps://cwe.mitre.org/data/definitions/79.html\n\n\n========================================================================\n7. Stored XSS in tracker maintenance\n========================================================================\nVulnerability Type:    CWE-79: Cross-site Scripting\nCVE-ID:                CVE-2026-108562\nRisk level:            Medium\nCVSS Base Score:       5.4\nCVSS Vector:           CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N\n------------------------------------------------------------------------\n\nDescription\n-----------\n\n\nResolution\n----------\n\n\nReferences\n----------\nhttps://hackerone.com/reports/3826207\nhttps://github.com/revive-adserver/revive-adserver/commit/ae0bbc4b3\nhttps://cwe.mitre.org/data/definitions/79.html\n\n\n========================================================================\n8. Campaign-zone linking without ownership validation\n========================================================================\n\nCVE-ID:                CVE-2026-68486\nRisk level:            Medium\nCVSS Base Score:       5.4\nCVSS Vector:           CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N\n------------------------------------------------------------------------\n\nDescription\n-----------\n\n\n\n\nResolution\n----------\n\n\nReferences\n----------\nhttps://hackerone.com/reports/3958112\nhttps://github.com/revive-adserver/revive-adserver/commit/8fc49ab1d\nhttps://github.com/revive-adserver/revive-adserver/commit/f0ab01a02\nhttps://cwe.mitre.org/data/definitions/639.html\n\n\n========================================================================\n9. Formula injection in conversion-report XLS exports\n========================================================================\nVulnerability Type:    CWE-94: Code Injection\nCVE-ID:                CVE-2026-108563\nRisk level:            Medium\nCVSS Base Score:       4.7\nCVSS Vector:           CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N\n------------------------------------------------------------------------\n\nDescription\n-----------\n\n\nResolution\n----------\n\n\nReferences\n----------\nhttps://hackerone.com/reports/3859000\nhttps://github.com/revive-adserver/revive-adserver/commit/1e4d48b18\nhttps://cwe.mitre.org/data/definitions/94.html\n\n\n========================================================================\n10. Reflected XSS in direct-selection invocation options\n========================================================================\nVulnerability Type:    CWE-79: Cross-site Scripting\nCVE-ID:                CVE-2026-108564\nRisk level:            Medium\nCVSS Base Score:       4.7\nCVSS Vector:           CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N\n------------------------------------------------------------------------\n\nDescription\n-----------\n\n\nResolution\n----------\n\n\nReferences\n----------\nhttps://hackerone.com/reports/3942028\nhttps://github.com/revive-adserver/revive-adserver/commit/cb8fdeddf\nhttps://cwe.mitre.org/data/definitions/79.html\n\n\n========================================================================\n11. Reflected XSS in popup invocation options\n========================================================================\nVulnerability Type:    CWE-79: Cross-site Scripting\nCVE-ID:                CVE-2026-108565\nRisk level:            Medium\nCVSS Base Score:       4.7\nCVSS Vector:           CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N\n------------------------------------------------------------------------\n\nDescription\n-----------\n\n\nResolution\n----------\n\n\nReferences\n----------\nhttps://hackerone.com/reports/3971985\nhttps://github.com/revive-adserver/revive-adserver/commit/2275165e0\nhttps://cwe.mitre.org/data/definitions/79.html\n\n\n========================================================================\n12. Cross-agency website-list disclosure\n========================================================================\n\nCVE-ID:                CVE-2026-68485\nRisk level:            Medium\nCVSS Base Score:       4.3\nCVSS Vector:           CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N\n------------------------------------------------------------------------\n\nDescription\n-----------\n\n\nResolution\n----------\n\n\nReferences\n----------\nhttps://hackerone.com/reports/3883840\nhttps://github.com/revive-adserver/revive-adserver/commit/42df0608e\nhttps://cwe.mitre.org/data/definitions/639.html\n\n\n========================================================================\n13. Cross-agency delivery rule set creation\n========================================================================\n\nCVE-ID:                CVE-2026-82978\nRisk level:            Medium\nCVSS Base Score:       4.3\nCVSS Vector:           CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N\n------------------------------------------------------------------------\n\nDescription\n-----------\n\n\nResolution\n----------\n\n\nReferences\n----------\nhttps://hackerone.com/reports/3929216\nhttps://hackerone.com/reports/3883840\nhttps://github.com/revive-adserver/revive-adserver/commit/cabeb2e53\nhttps://cwe.mitre.org/data/definitions/639.html\n\n\n========================================================================\n14. Cross-site request forgery in tracker invocation\n========================================================================\nVulnerability Type:    CWE-352: Cross-Site Request Forgery\nCVE-ID:                CVE-2026-77168\nRisk level:            Medium\nCVSS Base Score:       4.3\nCVSS Vector:           CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N\n------------------------------------------------------------------------\n\nDescription\n-----------\n\n\nResolution\n----------\n\n\nReferences\n----------\nhttps://hackerone.com/reports/3981932\nhttps://github.com/revive-adserver/revive-adserver/commit/a4593a679\nhttps://cwe.mitre.org/data/definitions/352.html\n\n\n========================================================================\nSolution\n========================================================================\n\n\n\n\n========================================================================\nContact Information\n========================================================================\n\nThe security contact for Revive Adserver can be reached at:\n\u003csecurity AT revive-adserver DOT com\u003e.\n\nPlease review https://www.revive-adserver.com/security/ before doing so.\n\n\n--\nMatteo Beccati\nOn behalf of the Revive Adserver Team\nhttps://www.revive-adserver.com/\n_______________________________________________\nSent through the Full Disclosure mailing list\nhttps://nmap.org/mailman/listinfo/fulldisclosure\nWeb Archives \u0026 RSS: https://seclists.org/fulldisclosure/"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-352",
              "description": "CWE-352",
              "lang": "en",
              "type": "CWE"
            },
            {
              "cweId": "CWE-79",
              "description": "CWE-79",
              "lang": "en",
              "type": "CWE"
            },
            {
              "cweId": "CWE-89",
              "description": "CWE-89",
              "lang": "en",
              "type": "CWE"
            },
            {
              "cweId": "CWE-94",
              "description": "CWE-94",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-13T02:14:18Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Nov/23"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://seclists.org/fulldisclosure/2026/Nov/23"
        },
        {
          "url": "https://cwe.mitre.org/data/definitions/352.html"
        },
        {
          "url": "https://cwe.mitre.org/data/definitions/639.html"
        },
        {
          "url": "https://cwe.mitre.org/data/definitions/79.html"
        },
        {
          "url": "https://cwe.mitre.org/data/definitions/89.html"
        },
        {
          "url": "https://cwe.mitre.org/data/definitions/94.html"
        },
        {
          "url": "https://github.com/revive-adserver/revive-adserver/commit/0aa9d0124"
        },
        {
          "url": "https://github.com/revive-adserver/revive-adserver/commit/156dee7bc"
        },
        {
          "url": "https://github.com/revive-adserver/revive-adserver/commit/1e4d48b18"
        },
        {
          "url": "https://github.com/revive-adserver/revive-adserver/commit/2275165e0"
        },
        {
          "url": "https://github.com/revive-adserver/revive-adserver/commit/42df0608e"
        },
        {
          "url": "https://github.com/revive-adserver/revive-adserver/commit/770130171"
        },
        {
          "url": "https://github.com/revive-adserver/revive-adserver/commit/8c449079d"
        },
        {
          "url": "https://github.com/revive-adserver/revive-adserver/commit/8fc49ab1d"
        },
        {
          "url": "https://github.com/revive-adserver/revive-adserver/commit/9643f44dc"
        },
        {
          "url": "https://github.com/revive-adserver/revive-adserver/commit/a4593a679"
        },
        {
          "url": "https://github.com/revive-adserver/revive-adserver/commit/ae0bbc4b3"
        },
        {
          "url": "https://github.com/revive-adserver/revive-adserver/commit/b9fd9b04b"
        },
        {
          "url": "https://github.com/revive-adserver/revive-adserver/commit/cabeb2e53"
        },
        {
          "url": "https://github.com/revive-adserver/revive-adserver/commit/cb8fdeddf"
        },
        {
          "url": "https://github.com/revive-adserver/revive-adserver/commit/cce8a4081"
        },
        {
          "url": "https://github.com/revive-adserver/revive-adserver/commit/e301dbbb7"
        },
        {
          "url": "https://github.com/revive-adserver/revive-adserver/commit/f0ab01a02"
        },
        {
          "url": "https://hackerone.com/reports/3826207"
        },
        {
          "url": "https://hackerone.com/reports/3831102"
        },
        {
          "url": "https://hackerone.com/reports/3859000"
        },
        {
          "url": "https://hackerone.com/reports/3878649"
        },
        {
          "url": "https://hackerone.com/reports/3883840"
        },
        {
          "url": "https://hackerone.com/reports/3896779"
        },
        {
          "url": "https://hackerone.com/reports/3908050"
        },
        {
          "url": "https://hackerone.com/reports/3929216"
        },
        {
          "url": "https://hackerone.com/reports/3942028"
        },
        {
          "url": "https://hackerone.com/reports/3958112"
        },
        {
          "url": "https://hackerone.com/reports/3971985"
        },
        {
          "url": "https://hackerone.com/reports/3981932"
        },
        {
          "url": "https://hackerone.com/reports/4075098"
        },
        {
          "url": "https://hackerone.com/reports/4116433"
        },
        {
          "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
        },
        {
          "url": "https://seclists.org/fulldisclosure/"
        },
        {
          "url": "https://www.revive-adserver.com/"
        },
        {
          "url": "https://www.revive-adserver.com/security/"
        },
        {
          "url": "https://www.revive-adserver.com/security/revive-sa-2026-004"
        }
      ],
      "source": {
        "defect": [
          "https://seclists.org/fulldisclosure/2026/Nov/23"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "[REVIVE-SA-2026-004] Revive Adserver Vulnerabilities",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2026-107247",
              "type": "related"
            },
            {
              "destId": "CVE-2026-107662",
              "type": "related"
            },
            {
              "destId": "CVE-2026-108558",
              "type": "related"
            },
            {
              "destId": "CVE-2026-108559",
              "type": "related"
            },
            {
              "destId": "CVE-2026-108560",
              "type": "related"
            },
            {
              "destId": "CVE-2026-108561",
              "type": "related"
            },
            {
              "destId": "CVE-2026-108562",
              "type": "related"
            },
            {
              "destId": "CVE-2026-108563",
              "type": "related"
            },
            {
              "destId": "CVE-2026-108564",
              "type": "related"
            },
            {
              "destId": "CVE-2026-108565",
              "type": "related"
            },
            {
              "destId": "CVE-2026-68485",
              "type": "related"
            },
            {
              "destId": "CVE-2026-68486",
              "type": "related"
            },
            {
              "destId": "CVE-2026-77168",
              "type": "related"
            },
            {
              "destId": "CVE-2026-82978",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0565",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Nov/23",
            "automated": true,
            "contentSha256": "0ccde5b6ab3ab392b6f181490375d083511f822734272dd7add6d5ed7d0f6759",
            "evidenceScore": 9,
            "messageId": "",
            "originalUrl": "https://seclists.org/fulldisclosure/2026/Nov/23",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-11-12T17:56:21Z"
          }
        },
        {
          "recordType": "advisory",
          "vulnId": "gcve-1988-2026-0565"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-11-13T02:14:18Z",
    "dateUpdated": "2026-11-13T02:14:18Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0565"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON
How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.