CVE-2026-50743

Name of the Vulnerable Software and Affected Versions Revive Adserver version 6.0.7

Description A Cross-Site Request Forgery (CSRF) issue exists in the zone-include.php script. This occurs because the application fails to verify the CSRF token during the linking and unlinking of banners or campaigns to zones. An attacker can exploit this by sending crafted GET or POST requests, enabling them to perform these administrative actions on behalf of an authenticated administrator.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.