Revive Adserver up to 6.0.8 Delivery Rule Set channel-edit.php agencyid authorization

Summaryinfo

A vulnerability, which was classified as problematic, was found in Revive Adserver up to 6.0.8. The affected element is an unknown function of the file channel-edit.php of the component Delivery Rule Set. Executing a manipulation of the argument agencyid can lead to authorization. This vulnerability is tracked as CVE-2026-82978. The attack can be launched remotely. No exploit exists. You should upgrade the affected component.

Detailsinfo

A vulnerability has been found in Revive Adserver up to 6.0.8 and classified as problematic. This vulnerability affects some unknown functionality of the file channel-edit.php of the component Delivery Rule Set. The manipulation of the argument agencyid with an unknown input leads to a authorization vulnerability. The CWE definition for the vulnerability is CWE-639. The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data. As an impact it is known to affect integrity. CVE summarizes:

An authorization bypass in channel-edit.php in Revive Adserver 6.0.8 and earlier allows an authenticated manager to create a delivery rule set belonging to another agency by changing the submitted agencyid parameter. The server trusts the submitted agency identifier when inserting the new rule set, allowing unauthorized creation of objects in another agency's account. The issue is fixed in Revive Adserver 6.0.9 by obtaining the agency identifier from the authenticated account rather than submitted form data and removing the agency identifier from the form's hidden fields.

The advisory is shared for download at hackerone.com. This vulnerability was named CVE-2026-82978 since 08/31/2026. The exploitation appears to be easy. The attack can be initiated remotely. There are known technical details, but no exploit is available.

By approaching the search of inurl:channel-edit.php it is possible to find vulnerable targets with Google Hacking.

Upgrading to version 6.0.9 eliminates this vulnerability.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Advertising Software

Vendor

• Revive

Name

• Adserver

Version

• 6.0.0
• 6.0.1
• 6.0.2
• 6.0.3
• 6.0.4
• 6.0.5
• 6.0.6
• 6.0.7
• 6.0.8

License

• free

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion