1. Home
  2. Vulnerabilities
  3. CVE-2026-50742
0.0
NA
CVE-2026-50742
Overview
Description

A stored XSS vulnerabilities exists in the `maintenance-acl-check.php` and `maintenance-banners-check.php` tools of Revive Adserver 6.0.7. The issue was caused by entity names being displayed without proper escaping when inconsistencies were detected. Whether the XSS payload is executed when an administrator uses the affected maintenance tools is not entirely under the attacker's control.

Details
INFO

Published Date :

June 26, 2026, 1:11 a.m.

Last Modified :

June 26, 2026, 1:11 a.m.

Remotely Exploit :

No

Source :

hackerone
Impact
Affected Products

The following products are affected by CVE-2026-50742 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Revive adserver
: Total Affected Vendor : 1 | Products : 1
Solution
Address stored XSS by escaping entity names in maintenance tools.
  • Ensure proper escaping for entity names.
  • Update Revive Adserver to a patched version.
  • Review and sanitize all user inputs.

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2026-50742 vulnerability anywhere in the article.

Results are limited to the first 20 news articles due to potential performance issues.

EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
CVSS
Vulnerability Scoring Details
No CVSS metrics available for this vulnerability.