CVE-2026-82978
CVSS Score
4.3
EPSS Score
0.0%
EPSS Percentile
0th
An authorization bypass in channel-edit.php in Revive Adserver 6.0.8 and earlier allows an authenticated manager to create a delivery rule set belonging to another agency by changing the submitted agencyid parameter. The server trusts the submitted agency identifier when inserting the new rule set, allowing unauthorized creation of objects in another agency's account. The issue is fixed in Revive Adserver 6.0.9 by obtaining the agency identifier from the authenticated account rather than submitted form data and removing the agency identifier from the form's hidden fields.
| CWE | CWE-639 |
| Vendor | revive |
| Product | adserver |
| Published | Nov 11, 2026 |
Stay Ahead of the Next One
Get instant alerts for revive adserver
Be the first to know when new medium vulnerabilities affecting revive adserver are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N Affected Versions
Revive / Adserver
0 ≤ 6.0.8
Credits
Shmulik Cohen Dang Hung Vi