CVE-2025-52670 HIGH

CVE-2025-52670

Vendor Revive
Product Revive Adserver
Published November 20, 2025
Last update December 1, 2025
View on NVD All CVEs

CVSS base score

7.1/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity High

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

What the vulnerability does

01Description

Missing authorization check in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes users on the system to delete banners owned by other accounts

Key dates

02Disclosure timeline

November 20, 2025 CVE published
December 1, 2025 Record updated