What’s Vulnerable › Vulnerabilities

CVE-2023-26756

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-04-14 · updated 2026-06-17
• Weakness: CWE-307

Description

The login page of Revive Adserver v5.4.1 is vulnerable to brute force attacks. NOTE: The vendor's position is that this is effectively mitigated by rate limits and password-quality features.

Affected products

• Revive Adserver: 5.4.1

References

• http://seclists.org/fulldisclosure/2024/Apr/27
• https://googleinformationsworld.blogspot.com/2023/04/revive-adserver-541-vulnerable-to-brute.html
• https://www.esecforte.com/login-page-brute-force-attack/
• https://www.revive-adserver.com/security/response-to-cve-2023-26756/
• http://seclists.org/fulldisclosure/2024/Apr/27
• https://googleinformationsworld.blogspot.com/2023/04/revive-adserver-541-vulnerable-to-brute.html
• https://www.esecforte.com/login-page-brute-force-attack/
• https://www.revive-adserver.com/security/response-to-cve-2023-26756/

Get alerted when CVE-2023-26756 or the next vulnerability affects your stack