Blesta

3 CVEs product

Monthly

CVE-2026-25616 MEDIUM This Month

Blesta 3.x through 5.x before 5.13.3 mishandles input validation, aka CORE-5665. [CVSS 4.7 MEDIUM]

XSS Blesta

NVD

CVSS 3.1

4.7

EPSS

0.0%

CVE-2026-25615 HIGH This Week

Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5668. [CVSS 7.2 HIGH]

Deserialization Blesta

NVD

CVSS 3.1

7.2

EPSS

0.0%

CVE-2026-25614 HIGH This Week

Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5680. [CVSS 7.5 HIGH]

Deserialization Blesta

NVD

CVSS 3.1

7.5

EPSS

0.0%

CVE-2026-25616

EPSS 0% CVSS 4.7

MEDIUM This Month

Blesta 3.x through 5.x before 5.13.3 mishandles input validation, aka CORE-5665. [CVSS 4.7 MEDIUM]

XSS Blesta

NVD

CVE-2026-25615

EPSS 0% CVSS 7.2

HIGH This Week

Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5668. [CVSS 7.2 HIGH]

Deserialization Blesta

NVD

CVE-2026-25614

EPSS 0% CVSS 7.5

HIGH This Week

Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5680. [CVSS 7.5 HIGH]

Deserialization Blesta

NVD