prebid

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

prebid records in CISA KEV

No prebid vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records

TI-2026-39547 CVE-2026-54735 · GHSA-4p3g-4hcj-wpvx

MEDIUM 50

Prebid Server is an open-source solution for running real-time advertising auctions in the cloud.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00611 Published 2026-07-29 Fixed in 4.4.0 CWE-918

TI-2026-39546 CVE-2026-54734

MEDIUM 50

Prebid Server Java is the Java version of Prebid Server.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00621 Published 2026-09-17 Fixed in 3.43.0 CWE-918

TI-2025-36681 CVE-2025-59039 · GHSA-m662-56rj-8fmm

MEDIUM 48

Prebid Universal Creative (PUC) is a JavaScript API to render multiple formats.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00338 Published 2025-09-09 No fix listed CWE-506

TI-2025-36680 CVE-2025-59038 · GHSA-jwq7-6j4r-2f92

LOW 39

Prebid.js is a free and open source library for publishers to quickly implement header bidding.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00351 Published 2025-09-09 Fixed in 10.10.0 CWE-506