Blesta Input Validation Vulnerability Allowing Remote Code Execution
Vulnerability
An input validation vulnerability has been identified in Blesta versions 3.x through 5.x prior to 5.13.3. This vulnerability, known as CORE-5665, could potentially allow remote code execution under certain conditions.
Impact
Exploitation of this vulnerability could lead to remote code execution on the server where Blesta is installed.
Remediation
Users are advised to upgrade to Blesta version 5.13.3. Instructions for upgrading and patching existing installations are available in the Blesta user manual. If using an unsupported version between 3.0 and 5.10, upgrade to 5.13.3.
Added: Feb 3, 2026, 8:18 PM
Updated: Feb 3, 2026, 8:18 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.0exploitability
7.4remediation
0.0relevance
2.7threat
0.1urgency
2.9incentive
4.2Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.