> CVE-2025-57794

« BACK_TO_HOME
PUBLISHED
2026-01-28 18:16
MODIFIED
2026-01-28 18:16
EPSS (Prob. Exploit)
0.64%
Top 49.2%
DATA SOURCES:
NVD 🔗 2026-01-28 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-11-08

> DESCRIPTION

Explorance Blue versions prior to 8.14.9 contain an authenticated unrestricted file upload vulnerability in the administrative interface. The application does not adequately restrict uploaded file types, allowing malicious files to be uploaded and executed by the server. This condition enables remote code execution under default configurations.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-434

> CWE DETAILED DESCRIPTIONS

CWE-434: Unrestricted Upload of File with Dangerous Type - The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

> HISTORIQUE DES MODIFICATIONS

Première apparition
28/01/2026 18:16
Source: NVD
📊 ENRICHISSEMENT 01/02/2026 06:45
CWE
Champ modifié: Description CWE
Ancienne valeur:
N/A
Nouvelle valeur:
CWE-434: Unrestricted Upload of File with Dangerous Type - The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Total des modifications: 1 Dernière mise à jour: 9 months ago

> REFERENCES

https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026...
https://online-help.explorance.com/blue/articles/security-advisories-(january-20...
https://online-help.explorance.com/blue/articles/security-advisory:-cve-2025-577...
https://www.explorance.com/products/blue
« BACK_TO_HOME