https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T21:39:37.529022+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-330536 EUVD-2026-330536 2026-10-06T21:39:37.576545+00:00 EUVD-2026-330536 https://cve.radiocsirt.org/vuln/fkie_cve-2026-50744 fkie_cve-2026-50744 2026-10-06T21:39:37.576583+00:00

A bypass to the admin‑only restriction of the XML‑RPC API in Revive Adserver 6.0.7. The API response for the ox.login method returned a session ID cookie in the HTTP headers, and although the method correctly returned an error, the associated session was not invalidated. As a result, the leaked session ID could be used to perform subsequent API calls without restrictions.

 https://cve.radiocsirt.org/vuln/ghsa-q5xg-wh3x-vmcf GHSA-q5xg-wh3x-vmcf 2026-10-06T21:39:37.576618+00:00

A bypass to the admin‑only restriction of the XML‑RPC API in Revive Adserver 6.0.7. The API response for the ox.login method returned a session ID cookie in the HTTP headers, and although the method correctly returned an error, the associated session was not invalidated. As a result, the leaked session ID could be used to perform subsequent API calls without restrictions.