EUVD-2026-123619

A cross-site request forgery vulnerability in tracker-invocation.php in Revive Adserver 6.0.8 and earlier allows an attacker to modify a tracker's name, description or advertiser assignment using an authenticated victim's permissions. A leftover state-changing handler accepts request parameters...

CVE-2026-77168

Revive Adserver version 6.0.8 and earlier is susceptible to a cross-site request forgery (CSRF) vulnerability in the tracker-invocation.php component. The root cause is a leftover state-changing handler that accepts request parameters without verifying a CSRF token , despite not being part of the...

CVE-2026-77168

A cross-site request forgery vulnerability in tracker-invocation.php in Revive Adserver 6.0.8 and earlier allows an attacker to modify a tracker's name, description or advertiser assignment using an authenticated victim's permissions. A leftover state-changing handler accepts request parameters...