CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-50739

A bypass for CVE‑2026‑34913 exists with proper ownership validation that had not been applied to the reverse operation of linking campaigns and trackers through the `tracker-campaigns.php` script in Revive Adserver 6.0.7 and earlier. As a result, a low‑privileged user could link their trackers to campaigns owned by other managers on the same instance, leading to inconsistent ownership relationships.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 20.5%

CVSS Severity

CVSS v3 Score 4.3

References

https://hackerone.com/reports/3780709

Products affected by CVE-2026-50739

Revive-Adserver » Revive Adserver » Version: N/A

cpe:2.3:a:revive-adserver:revive_adserver:-
Revive-Adserver » Revive Adserver » Version: 3.0.0

cpe:2.3:a:revive-adserver:revive_adserver:3.0.0
Revive-Adserver » Revive Adserver » Version: 3.0.1

cpe:2.3:a:revive-adserver:revive_adserver:3.0.1
Revive-Adserver » Revive Adserver » Version: 3.0.2

cpe:2.3:a:revive-adserver:revive_adserver:3.0.2
Revive-Adserver » Revive Adserver » Version: 3.0.3

cpe:2.3:a:revive-adserver:revive_adserver:3.0.3
Revive-Adserver » Revive Adserver » Version: 3.0.4

cpe:2.3:a:revive-adserver:revive_adserver:3.0.4
Revive-Adserver » Revive Adserver » Version: 3.0.5

cpe:2.3:a:revive-adserver:revive_adserver:3.0.5
Revive-Adserver » Revive Adserver » Version: 3.1.0

cpe:2.3:a:revive-adserver:revive_adserver:3.1.0
Revive-Adserver » Revive Adserver » Version: 3.2.0

cpe:2.3:a:revive-adserver:revive_adserver:3.2.0
Revive-Adserver » Revive Adserver » Version: 3.2.1

cpe:2.3:a:revive-adserver:revive_adserver:3.2.1
Revive-Adserver » Revive Adserver » Version: 3.2.2

cpe:2.3:a:revive-adserver:revive_adserver:3.2.2
Revive-Adserver » Revive Adserver » Version: 3.2.3

cpe:2.3:a:revive-adserver:revive_adserver:3.2.3
Revive-Adserver » Revive Adserver » Version: 3.2.4

cpe:2.3:a:revive-adserver:revive_adserver:3.2.4
Revive-Adserver » Revive Adserver » Version: 4.0.0

cpe:2.3:a:revive-adserver:revive_adserver:4.0.0
Revive-Adserver » Revive Adserver » Version: 4.0.1

cpe:2.3:a:revive-adserver:revive_adserver:4.0.1
Revive-Adserver » Revive Adserver » Version: 4.0.2

cpe:2.3:a:revive-adserver:revive_adserver:4.0.2
Revive-Adserver » Revive Adserver » Version: 4.1.0

cpe:2.3:a:revive-adserver:revive_adserver:4.1.0
Revive-Adserver » Revive Adserver » Version: 4.1.1

cpe:2.3:a:revive-adserver:revive_adserver:4.1.1
Revive-Adserver » Revive Adserver » Version: 4.1.2

cpe:2.3:a:revive-adserver:revive_adserver:4.1.2
Revive-Adserver » Revive Adserver » Version: 4.1.3

cpe:2.3:a:revive-adserver:revive_adserver:4.1.3
Revive-Adserver » Revive Adserver » Version: 4.1.4

cpe:2.3:a:revive-adserver:revive_adserver:4.1.4
Revive-Adserver » Revive Adserver » Version: 4.2.0

cpe:2.3:a:revive-adserver:revive_adserver:4.2.0
Revive-Adserver » Revive Adserver » Version: 4.2.1

cpe:2.3:a:revive-adserver:revive_adserver:4.2.1
Revive-Adserver » Revive Adserver » Version: 5.0.0

cpe:2.3:a:revive-adserver:revive_adserver:5.0.0
Revive-Adserver » Revive Adserver » Version: 5.0.1

cpe:2.3:a:revive-adserver:revive_adserver:5.0.1
Revive-Adserver » Revive Adserver » Version: 5.0.2

cpe:2.3:a:revive-adserver:revive_adserver:5.0.2
Revive-Adserver » Revive Adserver » Version: 5.0.3

cpe:2.3:a:revive-adserver:revive_adserver:5.0.3
Revive-Adserver » Revive Adserver » Version: 5.0.4

cpe:2.3:a:revive-adserver:revive_adserver:5.0.4
Revive-Adserver » Revive Adserver » Version: 5.0.5

cpe:2.3:a:revive-adserver:revive_adserver:5.0.5
Revive-Adserver » Revive Adserver » Version: 5.1.0

cpe:2.3:a:revive-adserver:revive_adserver:5.1.0
Revive-Adserver » Revive Adserver » Version: 5.1.1

cpe:2.3:a:revive-adserver:revive_adserver:5.1.1
Revive-Adserver » Revive Adserver » Version: 5.2.0

cpe:2.3:a:revive-adserver:revive_adserver:5.2.0
Revive-Adserver » Revive Adserver » Version: 5.2.1

cpe:2.3:a:revive-adserver:revive_adserver:5.2.1
Revive-Adserver » Revive Adserver » Version: 5.3.0

cpe:2.3:a:revive-adserver:revive_adserver:5.3.0
Revive-Adserver » Revive Adserver » Version: 5.3.1

cpe:2.3:a:revive-adserver:revive_adserver:5.3.1
Revive-Adserver » Revive Adserver » Version: 5.4.0

cpe:2.3:a:revive-adserver:revive_adserver:5.4.0
Revive-Adserver » Revive Adserver » Version: 5.4.1

cpe:2.3:a:revive-adserver:revive_adserver:5.4.1
Revive-Adserver » Revive Adserver » Version: 5.5.0

cpe:2.3:a:revive-adserver:revive_adserver:5.5.0
Revive-Adserver » Revive Adserver » Version: 5.5.1

cpe:2.3:a:revive-adserver:revive_adserver:5.5.1
Revive-Adserver » Revive Adserver » Version: 5.5.2

cpe:2.3:a:revive-adserver:revive_adserver:5.5.2
Revive-Adserver » Revive Adserver » Version: 5.5.3

cpe:2.3:a:revive-adserver:revive_adserver:5.5.3
Revive-Adserver » Revive Adserver » Version: 6.0.0

cpe:2.3:a:revive-adserver:revive_adserver:6.0.0
Revive-Adserver » Revive Adserver » Version: 6.0.1

cpe:2.3:a:revive-adserver:revive_adserver:6.0.1
Revive-Adserver » Revive Adserver » Version: 6.0.2

cpe:2.3:a:revive-adserver:revive_adserver:6.0.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-50739

Products

Pricing

Contact Us