VulnSocial

CVE-2026-34915Patch

LOWCVSS 6.1 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A missing sanitisation of user input in the zone-include.php script of Revive Adserver 6.0.6 and earlier could allow a low‑privileged user to exploit the clientid parameter to perform blind SQL injection attacks. Input sanitisation has been improved to ensure that all parameters processed by the script are properly validated.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-06-19: 1Patch / Workaround · 2026-06-19: 1Technical Details · 2026-06-19: 106-19
Signal classification1 categories
Patch
1100.0%
Full discourse1 post
  • takenaka hiroya@Joe_Biden_ja
    Patch

    CVE-2026-34915: Windows 10の権限昇格問題が確認。CVSSスコアは7.5。悪用される前にパッチを適用しておく必要があります。

    Post summary

    The post confirms a Windows 10 privilege escalation vulnerability (CVE‑2026‑34915, CVSS 7.5) and urges users to apply the patch before it can be exploited.

    0000049
    563 followersView on X

Explore more

Back to dashboard