Input Validation Flaw in Revive Adserver by Revive Adserver

CVE-2026-34916

What is CVE-2026-34916?

An input validation flaw in Revive Adserver, specifically in versions 6.0.6 and earlier, allows low-privileged users to exploit a logical parameter. This exploitation can lead to the injection of malicious PHP code into the compiled limitations field in the database, which may then be executed during banner delivery. The issue has been addressed by improving input sanitization processes to ensure that user inputs are properly validated, thereby mitigating potential security risks.

References