Vulnerabilities

TI-2026-20723 CVE-2026-25616 · GHSA-3q94-vm9h-5h6v

Blesta 3.x through 5.x before 5.13.3 mishandles input validation, aka CORE-5665.

LOW 28

Blesta 3.x through 5.x before 5.13.3 mishandles input validation, aka CORE-5665.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0042 Published 2026-02-03 Fixed in 5.13.3 CWE-79

TI-2026-20722 CVE-2026-25615 · GHSA-pg6q-9mqp-879x

LOW 34

Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5668.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00515 Published 2026-02-03 Fixed in 5.13.3 CWE-502

TI-2026-20721 CVE-2026-25614 · GHSA-h48q-qvjq-c932

LOW 35

Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5680.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.0044 Published 2026-02-03 Fixed in 5.13.3 CWE-502