CVE-2025-57795CRITICAL 9.9EPSS p41.0%

CVE-2025-57795CVE-2025-57795

Description

Explorance Blue versions prior to 8.14.13 contain an authenticated remote file download vulnerability in a web service component. In default configurations, this flaw can be leveraged to achieve remote code execution.

Scoring

CVSS 3.19.9 (CRITICAL)
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS0.54% probability of exploitation · percentile 41.0% · 2026-06-19T12:03:05Z
Published2026-01-28
Last modified2026-02-05

Underlying weaknesses· 1

CWE-434

References

  1. https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0004.md
  2. https://online-help.explorance.com/blue/articles/security-advisories-(january-2026)
  3. https://online-help.explorance.com/blue/articles/security-advisory:-cve-2025-57795
  4. https://www.explorance.com/products/blue

1

TypeTargetConfidenceTier
WeaknessUnrestricted Upload of File with Dangerous Typecwe-4340%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2025-57794
CVE
CVE-2025-57792
CVE
CVE-2025-57793
CVE
CVE-2025-57790
CVE
CVE-2025-2305
CVE
CVE-2025-59171
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.