CVE-2026-50741

HIGH

Revive Adserver < 6.0.7 - Improper Control of Generation of Code ('Code Injection')

Title source: rule

Description

Bypass to the fix for CVE-2026-34916. Variants of such vectors have been also reported by phucrio and offsetmd. The fix can be bypassed either by sending a disallowed but otherwise valid plugin identifier as `type`, or using the `ox.setChannelTargeting` XML-RPC API method.

References (2)

Core 2

Core References

https://hackerone.com/reports/3780854

https://hackerone.com/reports/3781492

Scores

CVSS v3 8.8

EPSS 0.0273

EPSS Percentile 84.3%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-94

Status published

Products (2)

Revive/Adserver < 6.0.7

revive-adserver/revive_adserver < 6.0.8

Published Jun 26, 2026

Tracked Since Jun 26, 2026