CVE-2025-57794

Unknown Unknown - Not Provided

BaseFortify

Publication date: 2026-01-28

Last updated on: 2026-02-05

Assigner: Mandiant Inc.

Description

Explorance Blue versions prior to 8.14.9 contain an authenticated unrestricted file upload vulnerability in the administrative interface. The application does not adequately restrict uploaded file types, allowing malicious files to be uploaded and executed by the server. This condition enables remote code execution under default configurations.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-28

Last Modified

2026-02-05

Generated

2026-07-06

AI Q&A

2026-01-29

EPSS Evaluated

2026-07-05

NVD

CVE-2025-57794

EUVD

EUVD-2025-206461

Affected Vendors & Products

Vendor	Product	Version / Range
explorance	blue	to 8.14.9 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-434	The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

Attack-Flow Graph

Executive Summary

This vulnerability exists in Explorance Blue versions prior to 8.14.9 and involves an authenticated unrestricted file upload in the administrative interface. The application does not properly restrict the types of files that can be uploaded, allowing attackers with valid credentials to upload malicious files that the server can execute. This can lead to remote code execution under default settings.

Impact Analysis

The vulnerability can allow an attacker with administrative access to upload and execute malicious files on the server remotely. This can lead to full compromise of the affected system, including unauthorized access, data theft, data modification, or disruption of services.

Mitigation Strategies

Immediate steps include restricting access to the administrative interface to trusted users only, monitoring and controlling file uploads, and upgrading Explorance Blue to version 8.14.9 or later where the vulnerability is fixed.

Hi! I’m here to help you understand CVE-2025-57794. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70