CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2025-57794

CVSS 9.1v3.1pub. 2026-01-28upd. 2026-02-05

Explorance Blue versions prior to 8.14.9 contain an authenticated unrestricted file upload vulnerability in the administrative interface. The application does not adequately restrict uploaded file types, allowing malicious files to be uploaded and executed by the server. This condition enables remote code execution under default configurations.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

  • Explorance Blue

    APP
    Explorance
    < 8.14.9
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2025-57792CRITICAL10.0PL ✓ten sam produkt

SQL Injection bez uwierzytelnienia w Explorance Blue (CVE-2025-57792)

CVE-2025-57795CRITICAL9.9PL ✓ten sam produkt

RCE przez podatny upload plików w Explorance Blue (CVE-2025-57795)

CVE-2025-57793HIGH8.6ten sam produkt

Explorance Blue versions prior to 8.14.9 contain a SQL injection vulnerability caused by insufficient validati...

CVE-2025-57796MEDIUM6.8ten sam produkt

Explorance Blue versions prior to 8.14.12 use reversible symmetric encryption with a hardcoded static key to p...

CVE-2025-52344MEDIUM6.1ten sam produkt

Multiple Cross Site Scripting (XSS) vulnerabilities in input fields in Explorance Blue 8.1.2 allows attackers ...