CVE-2025-52666: Low severity Revive Adserver vulnerability
Published Nov 20, 2025
·Updated
Improper neutralisation of format characters in the settings of Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an administrator user to disable the admin user console due to a fatal PHP error.
Affected Software
3 affected components
Revive Adserver<6.0.1
revive-adserver Revive Adserver<=5.5.2
revive-adserver Revive Adserver>=6.0.0<=6.0.1
Event History
Nov 20, 2025
CVE Published
via MITRE·07:10 PM
Data Sourced
via MITRE·07:10 PM
DescriptionSeverity
Data Sourced
via NVD·08:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-52666?
CVE-2025-52666 has been classified as a medium severity vulnerability.
2
How does CVE-2025-52666 affect Revive Adserver?
CVE-2025-52666 can lead to a fatal PHP error that disables the admin user console in Revive Adserver.
3
Which versions of Revive Adserver are affected by CVE-2025-52666?
CVE-2025-52666 affects Revive Adserver versions 5.5.2 and 6.0.1 and earlier.
4
How do I fix CVE-2025-52666?
To mitigate CVE-2025-52666, it is recommended to upgrade to the latest version of Revive Adserver that addresses this vulnerability.
5
What should I do if I cannot upgrade to fix CVE-2025-52666?
If an upgrade is not possible, review and restrict user permissions and monitor for unusual activity as interim measures against CVE-2025-52666.