CVE Intelligence

Blesta vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Blesta products: 3 record(s), with severity, exploitation and fixes.

Blesta 3

Exploited only (KEV) →

CVE-2026-25616 Medium · 6.1 Public exploit CWE-79 Feb 3, 2026
Cross-site Scripting (XSS) in Phillipsdata Blesta
Blesta 3.x through 5.x before 5.13.3 mishandles input validation, aka CORE-5665.
CVE-2026-25615 High · 7.2 CWE-502 Feb 3, 2026
Deserialization of Untrusted Data in Phillipsdata Blesta
Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5668.
CVE-2026-25614 High · 7.5 CWE-502 Feb 3, 2026
Deserialization of Untrusted Data in Phillipsdata Blesta
Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5680.