Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-25614

Object Injection in Blesta 3.x–5.x Allowing Remote Code Execution

Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5680.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Blesta Phillipsdata
Products
Blesta Blesta
CVE-2026-25615

Object Injection Vulnerability in Blesta Versions 3.x to 5.x Before 5.13.3

Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5668.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Blesta Phillipsdata
Products
Blesta Blesta
CVE-2024-25859

A path traversal vulnerability in the /path/to/uploads/ directory of Blesta before v5.9.2 allows attackers to takeover user accounts and execute arbitrary code.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Blesta Phillipsdata
Products
Blesta Blesta