CVE-2026-44958 | An access control bypass allows an advertiser‑level user to … | CVSS 5.4 MEDIUM

Description

An access control bypass allows an advertiser‑level user to activate or deactivate a banner in Revive Adserver 6.0.6 and earlier, even when such permissions were not granted. The banner-edit.php script allowed the banner status to be overwritten solely based on banner edit permissions. The status field has been removed from the hidden form fields in the banner edit screen.

Metadata

CVE ID: CVE-2026-44958
State: PUBLISHED
Assigner: hackerone
Reserved: 2026-05-08 15:00 UTC
Published: 2026-06-23 16:14 UTC
Last updated: 2026-06-23 17:30 UTC
Primary CWE: CWE-284
CWE-284 Improper Access Control - Generic
Vendor / Product: Revive / Adserver
Sources: cve.org · NVD

Severity & Metrics

5.4 MEDIUM CVSS 3.0

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

SSVC — CISA Coordinator

Exploitation: none
Automatable: no
Tech. Impact: partial

Affected products (1)

Vendor	Product	Platform	Versions
Revive	Adserver	—	0 ≤ 6.0.6

Weakness (CWE)

CWE	Source	Description
CWE-284	cna	CWE-284 Improper Access Control - Generic

CVSS scores (1)

Score	Severity	Version	Source	Vector
5.4	MEDIUM	3.0	cna	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

References (1)

https://hackerone.com/reports/3678828