CVE-2025-57794

Explorance Blue versions prior to 8.14.9 contain an authenticated unrestricted file upload vulnerability in the administrative interface. The application does not adequately restrict uploaded file types, allowing malicious files to be uploaded and executed by the server. This condition enables remote code execution under default configurations.

• CWE-434

• https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0003.mdThird Party Advisory
• https://online-help.explorance.com/blue/articles/security-advisories-(january-2026)Vendor Advisory
• https://online-help.explorance.com/blue/articles/security-advisory:-cve-2025-57794Vendor Advisory
• https://www.explorance.com/products/blueProduct

Published

Jan 28, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-57789During the brief window between installation and the first a…5.4
• CVE-2025-5779A vulnerability has been found in code-projects Patient Reco…7.5
• CVE-2025-57790A security vulnerability has been identified that allows rem…8.8
• CVE-2025-57791A security vulnerability has been identified that allows rem…6.5
• CVE-2025-57792Explorance Blue versions prior to 8.14.9 contain a SQL injec…10
• CVE-2025-57793Explorance Blue versions prior to 8.14.9 contain a SQL injec…8.6
• CVE-2025-57795Explorance Blue versions prior to 8.14.13 contain an authent…9.9
• CVE-2025-57796Explorance Blue versions prior to 8.14.12 use reversible sym…6.8
• CVE-2025-57797Incorrect privilege assignment vulnerability exists in ScanS…8.5
• CVE-2025-57798Joplin is an open source note-taking and to-do application t…5.5
• CVE-2025-57799StreamVault is a multi-platform video parsing and downloadin…8.7
• CVE-2025-5780A vulnerability was found in code-projects Patient Record Ma…7.5