by Kastro
Paper/Archive/CVE-2025-57792

CVE-2025-57792

Explorance Blue — SQL Injection Vulnerability in Explorance Blue

EPSS 0.4%CVSS 10.0
critical.is priorityof 100
38
CVSS 10.0 (ADP)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 38.1.381 × 207.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Explorance Blue versions prior to 8.14.9 contain a SQL injection vulnerability caused by insufficient validation of user input in a web application endpoint. An attacker can supply crafted input that is executed as part of backend database queries. The issue is exploitable without authentication, significantly raising the risk.

Affected

ProductAffectedFixed inSource
Blue< 8.14.98.14.9CNA

Scores by source

CISA ADP10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refexplorance.com/products/blueadvisoryonline-help.explorance.com/blue/articles/security-advisories-(january-2026)advisoryonline-help.explorance.com/blue/articles/security-advisory:-cve-2025-57792writeupgithub.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0001.md