Vulnerabilities

TI-2026-39546 CVE-2026-54734

Prebid Server Java: Vulnerability to request forgery allows for possible host environment data extraction

MEDIUM 50

Prebid Server Java is the Java version of Prebid Server.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00621 Published 2026-09-17 Fixed in 3.43.0 CWE-918

TI-2026-39547 CVE-2026-54735 · GHSA-4p3g-4hcj-wpvx

MEDIUM 50

Prebid Server is an open-source solution for running real-time advertising auctions in the cloud.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00611 Published 2026-07-29 Fixed in 4.4.0 CWE-918

TI-2025-36681 CVE-2025-59039 · GHSA-m662-56rj-8fmm

MEDIUM 48

Prebid Universal Creative (PUC) is a JavaScript API to render multiple formats.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00338 Published 2025-09-09 No fix listed CWE-506

TI-2025-36680 CVE-2025-59038 · GHSA-jwq7-6j4r-2f92

LOW 39

Prebid.js is a free and open source library for publishers to quickly implement header bidding.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00351 Published 2025-09-09 Fixed in 10.10.0 CWE-506