CVE-2025-57795 Unauthenticated Remote File Download in Explorance Blue

CriticalCVSS 9.9 EPSS 0.63%

Published: 2026-01-28 19:43
Updated: 2026-06-17 12:43
Exploit status: No public exploit known

Description

Explorance Blue versions prior to 8.14.13 contain an authenticated remote file download vulnerability in a web service component. In default configurations, this flaw can be leveraged to achieve remote code execution.

Affected products

Product	Affected versions	Fixed in
Explorance Blue	< 8.14.13	8.14.13

References

www.explorance.com product
online-help.explorance.com vendor-advisory
online-help.explorance.com vendor-advisory
github.com third-party-advisory

CVSS v3.1

9.9 Critical

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector: Network
Attack Complexity: Low
Privileges Required: Low
User Interaction: None
Scope: Changed
Confidentiality: High
Integrity: High
Availability: High

Weakness & likelihood

EPSS (exploitation probability, 30 days): 0.63% (percentile 50.6)
CWE: CWE-434 Unrestricted Upload of File with Dangerous Type

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.