VYPR
← All advisories
Low severity2.7NVD Advisory· Published Nov 20, 2025· Updated Sep 26, 2026

CVE-2025-52666

CVE-2025-52666

Description

Improper neutralisation of format characters in the settings of Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an administrator user to disable the admin user console due to a fatal PHP error.

Affected products

3
  • Revive Adserver/Adserverllm-fuzzy3 versions
    <=5.5.2, <=6.0.1+ 2 more
    • (no CPE)range: <=5.5.2, <=6.0.1
    • cpe:2.3:a:revive-adserver:revive_adserver:*:*:*:*:*:*:*:*range: <=5.5.2
    • (no CPE)range: 6.0.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.