Skip to content
OpenAdvisories
Low · 2.7 CVE-2026-21640 EUVD-2026-3329GHSA-cr56-64wj-q2r7

HackerOne community member Faraz Ahmed (PakCyberbot) has reported a format string injection in the Revive Adserver settings. When specific …

Published Jan 20, 2026 · Updated Jan 21, 2026 · Assigned by hackerone

Description

HackerOne community member Faraz Ahmed (PakCyberbot) has reported a format string injection in the Revive Adserver settings. When specific character combinations are used in a setting, the admin user console could be disabled due to a fatal PHP error.

Affected products

VendorProductAffectedFixed
Revive Revive Adserver 6 – ≤ 6.0.4 —

References