CVE-2025-55129

NONE EPSS 11.8%
Published Dec 2, 20257mo ago · Modified Jun 17, 20262w ago
Find Similar
Published Dec 2, 2025 7mo ago
Last Modified Jun 17, 2026 2w ago

Description

HackerOne community member Kassem S.(kassem_s94) has reported that username handling in Revive Adserver was still vulnerable to impersonation attacks after the fix for CVE-2025-52672, via several alternate techniques. Homoglyphs based impersonation has been independently reported by other HackerOne users, such as itz_hari_ and khoof.

Threat Intelligence

EPSS Exploit Probability
11.8% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available

Weaknesses 1

CWE-176

Affected Products 1

VendorProductVersionRange
aquaplatformrevive_adserver*≥6.0.0  –  <6.0.4

References 1

  • hackerone.com https://hackerone.com/reports/3434156
    ExploitIssue TrackingThird Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.