Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5680.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-25614 Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5680. https://www.cve.org/CVERecord?id=CVE-2026-25614
Post summary
Blesta versions 3.x to 5.x before 5.13.3 are vulnerable to object injection (CVE-2026-25614), as noted in the CVE record.
CVE-2026-25614 Object Injection Vulnerability in Blesta 3.x through 5.x ... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25614 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
The text announces CVE‑2026‑25614, an Object Injection vulnerability in Blesta 3.x through 5.x, and provides a link to a vulnerability details page without mentioning any PoC, exploit, or patch.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | phillipsdata | blesta | - | - | - |