Description
Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5680.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Blesta | Blesta | 3.0.0 – < 5.13.3 | 5.13.3 |
High · 7.5
CVE-2026-25614
EUVD-2026-5170GHSA-h48q-qvjq-c932
Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5680.
Published Feb 3, 2026 · Updated Feb 5, 2026 · Assigned by mitre