by Kastro
Paper/Archive/CVE-2025-57794

CVE-2025-57794

Explorance Blue — Unrestricted File Upload Vulnerability in Explorance Blue

EPSS 0.6%CVSS 9.1
critical.is priorityof 100
37
CVSS 9.1 (ADP)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 50.6.506 × 2010.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Explorance Blue versions prior to 8.14.9 contain an authenticated unrestricted file upload vulnerability in the administrative interface. The application does not adequately restrict uploaded file types, allowing malicious files to be uploaded and executed by the server. This condition enables remote code execution under default configurations.

Affected

ProductAffectedFixed inSource
Blue< 8.14.98.14.9CNA

Scores by source

CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refexplorance.com/products/blueadvisoryonline-help.explorance.com/blue/articles/security-advisories-(january-2026)advisoryonline-help.explorance.com/blue/articles/security-advisory:-cve-2025-57794writeupgithub.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0003.md