CVE-2025-57794criticalCWE-434

CVE-2025-57794: critical vulnerability in Explorance Blue

Unrestricted File Upload Vulnerability in Explorance Blue

Published

Follow this CVE+ Monitor Blue

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.1epss 0.6%
Explorance Blue versions prior to 8.14.9 contain an authenticated unrestricted file upload vulnerability in the administrative interface. The application does not adequately restrict uploaded file types, allowing malicious files to be uploaded and executed by the server. This condition enables remote code execution under default configurations.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Affected products
Explorance · Blue
Related CVEs — Explorance Blue

In the same product, most dangerous first.

CVE-2025-57795CRITICALUnauthenticated Remote File Download in Explorance BlueEPSS 0.6%CVE-2025-57792CRITICALSQL Injection Vulnerability in Explorance BlueEPSS 0.4%CVE-2025-57793HIGHSQL Injection Vulnerability in Explorance BlueEPSS 0.4%CVE-2025-57796MEDIUMUse of a hardcoded static key to protect sensitive data in Explorance BlueEPSS 0.2%