High severity8.8OSV Advisory· Published Jun 26, 2026· Updated Jun 29, 2026
CVE-2026-50741
CVE-2026-50741
Description
Bypass to the fix for CVE-2026-34916. Variants of such vectors have been also reported by phucrio and offsetmd. The fix can be bypassed either by sending a disallowed but otherwise valid plugin identifier as type, or using the ox.setChannelTargeting XML-RPC API method.
Affected products
2cpe:2.3:a:revive-adserver:revive_adserver:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:revive-adserver:revive_adserver:*:*:*:*:*:*:*:*range: <6.0.8
- (no CPE)range: v6.0.7, v6.0.6, v6.0.5, …
Patches
Vulnerability mechanics
References
2- hackerone.com/reports/3780854nvdIssue TrackingThird Party Advisory
- hackerone.com/reports/3781492nvdIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.