How severe is CVE-2025-52666?

CVE-2025-52666 has a CVSS 3.x base score of 2.7, rated low severity. It is exploitable over network with low attack complexity, requires high privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability low.

Is CVE-2025-52666 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (29th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2025-52666?

CVE-2025-52666 affects Revive-adserver Revive Adserver. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2025-52666?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2025-52666 have an EU (EUVD) identifier?

Yes. CVE-2025-52666 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-198351.

When was CVE-2025-52666 published?

CVE-2025-52666 was published on 2025-11-20 and last updated on 2026-06-17.

CVE-2025-52666

CVE-2025-52666 is a low-severity vulnerability in Revive-adserver Revive Adserver with a CVSS 3.x base score of 2.7. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-134.

Key facts

Severity: Low (CVSS 3.x base score 2.7)
EPSS exploit prediction: 0% (29th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2025-198351
Weakness: CWE-134
Affected product: Revive-adserver Revive Adserver
Published: 2025-11-20
Last modified: 2026-06-17

Description

Improper neutralisation of format characters in the settings of Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an administrator user to disable the admin user console due to a fatal PHP error.

Frequently asked questions

What is CVE-2025-52666?: Improper neutralisation of format characters in the settings of Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an administrator user to disable the admin user console due to a fatal PHP error.
How severe is CVE-2025-52666?: CVE-2025-52666 has a CVSS 3.x base score of 2.7, rated low severity. It is exploitable over network with low attack complexity, requires high privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability low.
Is CVE-2025-52666 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (29th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2025-52666?: CVE-2025-52666 affects Revive-adserver Revive Adserver. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2025-52666?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2025-52666 have an EU (EUVD) identifier?: Yes. CVE-2025-52666 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-198351.
When was CVE-2025-52666 published?: CVE-2025-52666 was published on 2025-11-20 and last updated on 2026-06-17.

References

https://hackerone.com/reports/3399218

Affected products (1)

cpe:2.3:a:revive-adserver:revive_adserver:*:*:*:*:*:*:*:*

More vulnerabilities in Revive-adserver Revive Adserver

CVE-2016-9125 — Critical (CVSS 9.8): Revive Adserver before 3.2.3 suffers from session fixation, by allowing arbitrary session identifiers to be forced and,…
CVE-2016-9124 — Critical (CVSS 9.8): Revive Adserver before 3.2.3 suffers from Improper Restriction of Excessive Authentication Attempts. The login page of…
CVE-2017-5830 — Critical (CVSS 9.8): Revive Adserver before 4.0.1 allows remote attackers to execute arbitrary code via serialized data in the cookies…
CVE-2016-9470 — Critical (CVSS 9.0): Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected File Download. `www/delivery/asyncspc.php` was vulnerable…
CVE-2026-50741 — High (CVSS 8.8): Bypass to the fix for CVE-2026-34916. Variants of such vectors have been also reported by phucrio and offsetmd. The fix…
CVE-2025-48986 — High (CVSS 8.8): Authorization bypass in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an logged in attacker to change…

All CVEs affecting Revive-adserver Revive Adserver →

Other CWE-134 vulnerabilities

CVE-2012-1851 — Critical (CVSS 10.0): Format string vulnerability in the Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2,…
CVE-2012-0242 — Critical (CVSS 10.0): Format string vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary…
CVE-2011-2475 — Critical (CVSS 10.0): Format string vulnerability in ECTrace.dll in the iMailGateway service in the Internet Mail Gateway in OneBridge Server…
CVE-2011-1568 — Critical (CVSS 10.0): Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and…
CVE-2010-4235 — Critical (CVSS 10.0): Format string vulnerability in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server…
CVE-2011-0270 — Critical (CVSS 10.0): Format string vulnerability in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows…

Browse all CWE-134 vulnerabilities →