CVE-2026-25614

概要

参考情報

• blesta.com/2026/01/28/security-advisory · Vendor Advisory
• seclists.org/fulldisclosure/2026/Feb/2 · Mailing List

blesta のその他の脆弱性

• CVE-2026-25616中 6.1Blesta 3.x through 5.x before 5.13.3 mishandles input validation, aka CORE-5665.
• CVE-2026-25615高 7.2Blesta 3.x through 5.x before 5.13.3 allows object injection, aka CORE-5668.
• CVE-2024-25859高 7.1A path traversal vulnerability in the /path/to/uploads/ directory of Blesta before v5.9.2 allows attackers to takeover user accounts and exe…