CVE-2026-50743CWE-352

A CSRF vulnerability exists in the `zone-include.php` script in Revive Adserver 6.0.7

Medium · published July 20, 2026

CVSS v3.0
5.4
EPSS
0%
Percentile
3.4
In the wild
Unconfirmed
What it is

A CSRF vulnerability exists in the `zone-include.php` script in Revive Adserver 6.0.7. Linking and unlinking banners or campaigns to zones could be triggered via crafted GET or POST requests without any verification of the CSRF token, allowing an attacker to perform these actions on behalf of an authenticated administrator.

The record
Technical detail
CVSS v3.0
5.4 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00145 · 3.4th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2026-07-20T16:53Z
EPSS history
Timeline
  • 20 JUL 16:53Z
    A CSRF vulnerability exists in the `zone-include.php` script in Revive Adserver 6.0.7
    cvelistv5