CVE-2026-50742

MediumCVSS 5.4/10Last modified Jun 29, 2026

Description

A stored XSS vulnerabilities exists in the `maintenance-acl-check.php` and `maintenance-banners-check.php` tools of Revive Adserver 6.0.7. The issue was caused by entity names being displayed without proper escaping when inconsistencies were detected. Whether the XSS payload is executed when an administrator uses the affected maintenance tools is not entirely under the attacker's control.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
Revive	Adserver	<= 6.0.7

References

https://hackerone.com/reports/3781311Issue Tracking, Third Party Advisory

Timeline

Published: Jun 26, 2026
Last modified: Jun 29, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-507435.4A CSRF vulnerability exists in the `zone-include.php` script in Revive Adserver 6.0.7. Linking and unlinking banners or campaigns to zones c CVE-2026-507444.3A bypass to the admin‑only restriction of the XML‑RPC API in Revive Adserver 6.0.7. The API response for the ox.login method returned a sess CVE-2026-507456.1A missing sanitisation vulnerability exists with user input in the stats-video.php script. The way URLs to this script were constructed did CVE-2026-5074610.0A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to ex CVE-2026-507479.9A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found CVE-2026-507489.9A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Acce CVE-2026-507496.5Improper Authorization vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.1. Any authenticated user can reject CVE-2026-50754.3The All in One SEO plugin for WordPress is vulnerable to Sensitive Information Exposure via 'internalOptions' localized script data in versi CVE-2026-507507.5Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All. Following the fix for C CVE-2026-507519.3A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated r CVE-2026-507527.4A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an unauthenticated attacker positioned as a ma CVE-2026-507559.8An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the X-Forwarded-For header value