🔺Severity: High
👽 Reporter: riodrwn
⭐️ Reputation: 488
🛠 State: resolved
💼 Team: Revive Adserver
💵 Bounty: null
🕐 Submitted: 2026-06-03
⏰ Disclosed: 2026-06-25 13:40:57
📝 Summary: A vulnerability in the delivery-limitation
logical validation was reported. The vulnerability allowed bypassing the fix for CVE-2026-34916 by sending a disallowed but otherwise valid plugin identifier as type, or using the ox.setChannelTargeting XML-RPC API method.📂 Report JSON File: 3780854
@hackeronereports