CVE-2025-57795CWE-434

Unauthenticated Remote File Download in Explorance Blue

Critical · published January 28, 2026

CVSS v3.1
9.9
EPSS
1%
Percentile
48.7
In the wild
Unconfirmed
What it is

🔥 An authenticated remote file download flaw in Explorance Blue could let attackers execute code on your server, taking control with just a simple request! Think of this as a restaurant where a waiter can serve you every dish on the menu without checking orders—if they can grab anything from the kitchen, chaos could ensue! An attacker could exploit this vulnerability to remotely execute malicious code, potentially leading to full control of the server and access to sensitive data. This is absolutely devastating for any organization relying on this software, as it could compromise entire systems and information!

Put simply

Think of this as a restaurant where a waiter can serve you every dish on the menu without checking orders—if they can grab anything from the kitchen, chaos could ensue! CVE-2025-57795 allows authenticated users to initiate remote file downloads without proper validation, leading to remote code execution on vulnerable versions of Explorance Blue prior to 8.14.13.

What to do

An attacker could exploit this vulnerability to remotely execute malicious code, potentially leading to full control of the server and access to sensitive data. This is absolutely devastating for any organization relying on this software, as it could compromise entire systems and information! To protect your environment, immediately update Explorance Blue to version 8.14.13 or later. Review your user access controls to ensure that only authorized personnel can execute sensitive functions. Additionally, assess any configurations that may expose this vulnerability. You've got this! Follow these steps, and you'll be well on your way to securing your system. 🛡️

The record
Technical detail
CVSS v3.1
9.9 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00612 · 48.7th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2026-01-28T17:43Z
EPSS history
Timeline
  • 28 JAN 17:43Z
    Unauthenticated Remote File Download in Explorance Blue
    cvelistv5