High severity7.5NVD Advisory· Published Apr 14, 2023· Updated Jun 17, 2026

CVE-2023-26756

Description

The login page of Revive Adserver v5.4.1 is vulnerable to brute force attacks. NOTE: The vendor's position is that this is effectively mitigated by rate limits and password-quality features.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Revive Adserver/Adserver3 versions
cpe:2.3:a:revive:adserver:5.4.1:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:revive:adserver:5.4.1:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: =5.4.1

Patches

Vulnerability mechanics

References

googleinformationsworld.blogspot.com/2023/04/revive-adserver-541-vulnerable-to-brute.htmlnvdExploitThird Party Advisory
seclists.org/fulldisclosure/2024/Apr/27nvd
www.esecforte.com/login-page-brute-force-attack/nvd
www.revive-adserver.com/security/response-to-cve-2023-26756/nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000