CVEvulnerability
CVE-2025-57794
9.1 CRITICAL
Official page ↗
- Status
- Analyzed
- Published
- 2026-01-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- Weaknesses
- CWE-434
Description
Explorance Blue versions prior to 8.14.9 contain an authenticated unrestricted file upload vulnerability in the administrative interface. The application does not adequately restrict uploaded file types, allowing malicious files to be uploaded and executed by the server. This condition enables remote code execution under default configurations.
Affected configurations
• explorance blue (< 8.14.9)
Related
Weakness · CWE (1)
- CWE-434 Unrestricted Upload of File with Dangerous Type weakness
References
- https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0003.md Third Party Advisory
- https://online-help.explorance.com/blue/articles/security-advisories-(january-2026) Vendor Advisory
- https://online-help.explorance.com/blue/articles/security-advisory:-cve-2025-57794 Vendor Advisory
- https://www.explorance.com/products/blue Product