Beveiligingsadvies

CVE-2026-21641

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-01-20 20:48:47

Laatst bijgewerkt 2026-01-21 18:52:48

Toegewezen door hackerone

CVSS-score 7.1

Status PUBLISHED

Beschrijving

HackerOne community member Jad Ghamloush (0xjad) has reported an authorization bypass vulnerability in the `tracker-delete.php` script of Revive Adserver. Users with permissions to delete trackers are mistakenly allowed to delete trackers owned by other accounts.

← Alle CVE's bekijken Bekijk op cve.org ↗