CVE-2026-44959

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-44959", "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "state": "PUBLISHED", "assignerShortName": "hackerone", "dateReserved": "2026-05-08T15:00:02.447Z", "datePublished": "2026-06-23T16:14:38.048Z", "dateUpdated": "2026-06-23T17:41:12.087Z"}, "containers": {"cna": {"descriptions": [{"lang": "en", "value": "A missing validation of user input exists when saving delivery limitations in Revive Adserver 6.0.6 and earlier. A low\u2011privileged user could add an unexpected component parameter and inject malicious PHP code into the compiledlimitations field, which would then be executed during banner delivery. Input sanitisation has been improved to ensure that unexpected parameters are filtered out."}], "affected": [{"defaultStatus": "unaffected", "vendor": "Revive", "product": "Adserver", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "6.0.6", "versionType": "semver"}]}], "references": [{"url": "https://hackerone.com/reports/3744200"}], "metrics": [{"cvssV3_0": {"version": "3.0", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH"}}], "problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "cweId": "CWE-94", "description": "CWE-94 Code Injection"}]}], "credits": [{"lang": "en", "value": "rajib_mahmud", "type": "reporter"}], "providerMetadata": {"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "shortName": "hackerone", "dateUpdated": "2026-06-23T16:14:38.048Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-06-23T17:41:06.795049Z", "id": "CVE-2026-44959", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-23T17:41:12.087Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-44959", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-06-23T17:41:06.795049Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-23T17:41:09.187Z"}}], "cna": {"credits": [{"lang": "en", "type": "reporter", "value": "rajib_mahmud"}], "metrics": [{"cvssV3_0": {"version": "3.0", "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}}], "affected": [{"vendor": "Revive", "product": "Adserver", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "6.0.6"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://hackerone.com/reports/3744200"}], "descriptions": [{"lang": "en", "value": "A missing validation of user input exists when saving delivery limitations in Revive Adserver 6.0.6 and earlier. A low\u2011privileged user could add an unexpected component parameter and inject malicious PHP code into the compiledlimitations field, which would then be executed during banner delivery. Input sanitisation has been improved to ensure that unexpected parameters are filtered out."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-94", "description": "CWE-94 Code Injection"}]}], "providerMetadata": {"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "shortName": "hackerone", "dateUpdated": "2026-06-23T16:14:38.048Z"}}}, "cveMetadata": {"cveId": "CVE-2026-44959", "state": "PUBLISHED", "dateUpdated": "2026-06-23T17:41:12.087Z", "dateReserved": "2026-05-08T15:00:02.447Z", "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "datePublished": "2026-06-23T16:14:38.048Z", "assignerShortName": "hackerone"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Adserver", "vendor": "Revive", "versions": [{"lessThanOrEqual": "6.0.6", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "support@hackerone.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A missing validation of user input exists when saving delivery limitations in Revive Adserver 6.0.6 and earlier. A low\u2011privileged user could add an unexpected component parameter and inject malicious PHP code into the compiledlimitations field, which would then be executed during banner delivery. Input sanitisation has been improved to ensure that unexpected parameters are filtered out."}, {"lang": "es", "value": "Existe una validaci\u00f3n faltante de la entrada del usuario al guardar las limitaciones de entrega en Revive Adserver 6.0.6 y versiones anteriores. Un usuario con pocos privilegios podr\u00eda a\u00f1adir un par\u00e1metro de componente inesperado e inyectar c\u00f3digo PHP malicioso en el campo compiledlimitations, que luego ser\u00eda ejecutado durante la entrega de banners. La sanitizaci\u00f3n de la entrada ha sido mejorada para asegurar que los par\u00e1metros inesperados sean filtrados."}], "id": "CVE-2026-44959", "lastModified": "2026-10-26T11:10:00.157", "metrics": {"cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "support@hackerone.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-44959", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-06-23T17:41:06.795049Z", "version": "2.0.3"}}]}, "published": "2026-06-23T17:17:00.120", "references": [{"source": "support@hackerone.com", "url": "https://hackerone.com/reports/3744200"}], "sourceIdentifier": "support@hackerone.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-94"}], "source": "support@hackerone.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,6.0.6]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Adserver", "source": "cna", "vendor": "Revive"}, "product": "adserver", "vendor": "revive"}], "created": "2026-06-23T20:00:07.458510+00:00", "updated": "2026-06-24T12:00:05.954550+00:00", "vendors": ["revive", "revive$PRODUCT$adserver"]}