Vulnerability Details CVE-2026-25615
Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5668.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 39.8%
CVSS Severity
CVSS v3 Score 7.2
References
Products affected by CVE-2026-25615
-
cpe:2.3:a:phillipsdata:blesta:3.0.0
-
cpe:2.3:a:phillipsdata:blesta:3.2.0
-
cpe:2.3:a:phillipsdata:blesta:5.13.1
-
cpe:2.3:a:phillipsdata:blesta:5.13.2
-
cpe:2.3:a:phillipsdata:blesta:5.9.2