Blesta

Products

ProductCVEsExploitedLatest
Blesta3–Feb 3, 2026

Exploited and recent CVEs

  • CVE-2026-25616 Medium 4.7 Blesta 3.x through 5.x before 5.13.3 mishandles input validation, aka CORE-5665. 0.4%
  • CVE-2026-25615 High 7.2 Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5668. 0.5%
  • CVE-2026-25614 High 7.5 Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5680. 0.4%