CVE-2025-57792

Explorance Blue versions prior to 8.14.9 contain a SQL injection vulnerability caused by insufficient validation of user input in a web application endpoint. An attacker can supply crafted input that is executed as part of backend database queries. The issue is exploitable without authentication, significantly raising the risk.

• CWE-89

• https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0001.mdThird Party Advisory
• https://online-help.explorance.com/blue/articles/security-advisories-(january-2026)Vendor Advisory
• https://online-help.explorance.com/blue/articles/security-advisory:-cve-2025-57792Vendor Advisory
• https://www.explorance.com/products/blueProduct

Published

Jan 28, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-57787A reflected cross-site scripting (xss) vulnerability exists …6.1
• CVE-2025-57788A vulnerability in a known login mechanism allows unauthenti…6.5
• CVE-2025-57789During the brief window between installation and the first a…5.4
• CVE-2025-5779A vulnerability has been found in code-projects Patient Reco…7.5
• CVE-2025-57790A security vulnerability has been identified that allows rem…8.8
• CVE-2025-57791A security vulnerability has been identified that allows rem…6.5
• CVE-2025-57793Explorance Blue versions prior to 8.14.9 contain a SQL injec…8.6
• CVE-2025-57794Explorance Blue versions prior to 8.14.9 contain an authenti…9.1
• CVE-2025-57795Explorance Blue versions prior to 8.14.13 contain an authent…9.9
• CVE-2025-57796Explorance Blue versions prior to 8.14.12 use reversible sym…6.8
• CVE-2025-57797Incorrect privilege assignment vulnerability exists in ScanS…8.5
• CVE-2025-57798Joplin is an open source note-taking and to-do application t…5.5