Vulnerability Database

322,732

Total vulnerabilities in the database

CVE-2026-21640

HackerOne community member Faraz Ahmed (PakCyberbot) has reported a format string injection in the Revive Adserver settings. When specific character combinations are used in a setting, the admin user console could be disabled due to a fatal PHP error.

  • Published: Jan 20, 2026
  • Updated: Jan 31, 2026
  • CVE: CVE-2026-21640
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 2.7
  • AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

CWEs:

Software From Fixed in
aquaplatform / revive_adserver 6.0.0 6.0.4.x