CVE-2026-25616Disclosure(phillipsdata / blesta)

LOWCVSS 6.1 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

Blesta 3.x through 5.x before 5.13.3 mishandles input validation, aka CORE-5665.

phillipsdata CVEs Back to dashboard

1.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

Weakness type (CWE)

CWE-79

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

blesta

Threat summary

Public PoC is present in monitored signal
3 mentions across 3 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 1 signal
Technical details provided in 3 signals
Disclosure: 3 classified signals
Peaked 2d ago at 1 mentions (2026-02-03); latest day: 1
3 total mentions across 3 days

Affected systems

Vendors

phillipsdata

Products

blesta

Deep dive

Activity timeline3 mentions / 3d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets3 URLs

By indicator

Full discourse3 posts

pdnuclei-bot@pdnuclei_bot182d
Disclosure
🚨 CVE-2026-25616 - medium 🚨 Blesta <= 5.13.1 - Cross-Site Scripting > Blesta 3.x through 5.x before 5.13.3 contains an input validation vulnerability cause... 👾 https://cloud.projectdiscovery.io/library/CVE-2026-25616 @pdnuclei #NucleiTemplates #cve
Post summary
The tweet announces CVE‑2026‑25616, a medium‑severity XSS vulnerability in Blesta, and links to a detection template, serving as a disclosure of the vulnerability details.
00011149
916 followersView on X
CVE@CVEnew247d
Disclosure
CVE-2026-25616 Blesta 3.x through 5.x before 5.13.3 mishandles input validation, aka CORE-5665. https://www.cve.org/CVERecord?id=CVE-2026-25616
Post summary
The post announces CVE-2026-25616, describing an input‑validation flaw affecting Blesta 3.x-5.x versions prior to 5.13.3.
00010156
56.5K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds245d
Disclosure
CVE-2026-25616 Blesta 5.x Input Validation Vulnerability Prior to Version 5.13.3 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25616
Post summary
The text announces CVE‑2026‑25616 as an input‑validation flaw in Blesta 5.x before version 5.13.3, with no evidence of exploitation, patches or PoC.
0000061
4.0K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	phillipsdata	blesta	-	-	-

Explore more

Back to dashboard phillipsdata CVEs blesta vulnerabilities