CVE-2025-52666

Low · 2.7

CVSS

2.7

EPSS

0.5%

Published

Nov 20, 2025

CISA due date

—

The record

Improper neutralisation of format characters in the settings of Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an administrator user to disable the admin user console due to a fatal PHP error.

Affected packages

Ecosystem	Package	Introduced	Fixed