Aquaplatform Revive_adserver

9 CVEs affecting Aquaplatform Revive_adserver. Latest disclosed: 2026-01-20. Critical: 0, High: 0.

Top CVEs affecting Aquaplatform Revive_adserver
CVESeverityScorePublishedSummary
CVE-2026-21641Medium6.52026-01-20HackerOne community member Jad Ghamloush (0xjad) has reported an authorization bypass vulnerability in the `tracker-delete.php` script of Revive Adserver. User…
CVE-2025-55128Medium6.52025-11-20HackerOne community member Dang Hung Vi (vidang04) has reported an uncontrolled resource consumption vulnerability in the “userlog-index.php”. An attacker with…
CVE-2025-55126Medium6.52025-11-20HackerOne community member Dang Hung Vi (vidang04) has reported a stored XSS vulnerability involving the navigation box at the top of advertiser-related pages…
CVE-2026-21664Medium6.12026-01-20HackerOne community member Huynh Pham Thanh Luc (nigh7c0r3) has reported a reflected XSS vulnerability in the afr.php delivery script of Revive Adserver. An at…
CVE-2026-21663Medium6.12026-01-20HackerOne community member Patrick Lang (7yr) has reported a reflected XSS vulnerability in the banner-acl.php script of Revive Adserver. An attacker can craft…
CVE-2026-21642Medium6.12026-01-20HackerOne community member Patrick Lang (7yr) has reported a reflected XSS vulnerability in the `banner-acl.php` and `channel-acl.php` scripts of Revive Adserv…
CVE-2025-55129Medium5.42025-12-02HackerOne community member Kassem S.(kassem_s94) has reported that username handling in Revive Adserver was still vulnerable to impersonation attacks after the…
CVE-2025-55127Medium5.42025-11-20HackerOne community member Dao Hoang Anh (yoyomiski) has reported an improper neutralization of whitespace in the username when adding new users. A username wi…
CVE-2026-21640Low2.72026-01-20HackerOne community member Faraz Ahmed (PakCyberbot) has reported a format string injection in the Revive Adserver settings. When specific character combinatio…