CVE-2026-50744

A bypass to the admin‑only restriction of the XML‑RPC API in Revive Adserver 6.0.7. The API response for the ox.login method returned a session ID cookie in the HTTP headers, and although the method correctly returned an error, the associated session was not invalidated. As a result, the leaked session ID could be used to perform subsequent API calls without restrictions.

• CWE-284

• https://hackerone.com/reports/3783738Issue Tracking, Third Party Advisory

Published

Jun 26, 2026

Last Modified

Jun 29, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-50739A bypass for CVE‑2026‑34913 exists with proper ownership val…4.3
• CVE-2026-5074The ARMember Premium plugin for WordPress is vulnerable to S…6.5
• CVE-2026-50740A missing sanitisation vulnerability of user input in the zo…5.4
• CVE-2026-50741Bypass to the fix for CVE-2026-34916. Variants of such vecto…8.8
• CVE-2026-50742A stored XSS vulnerabilities exists in the `maintenance-acl-…5.4
• CVE-2026-50743A CSRF vulnerability exists in the `zone-include.php` script…5.4
• CVE-2026-50745A missing sanitisation vulnerability exists with user input …6.1
• CVE-2026-50746A malicious actor with access to the network could exploit a…10
• CVE-2026-50747A malicious actor with access to the network and low privile…9.9
• CVE-2026-50748A malicious actor with access to the network and low privile…9.9
• CVE-2026-50749Improper Authorization vulnerability in Apache Answer. This…6.5
• CVE-2026-5075The All in One SEO plugin for WordPress is vulnerable to Sen…4.3