CVE-2025-57792: Explorance Blue

Critical severity, CVSS 10.0. EPSS: 0.4% chance of exploitation in the next 30 days.

Explorance Blue versions prior to 8.14.9 contain a SQL injection vulnerability caused by insufficient validation of user input in a web application endpoint. An attacker can supply crafted input that is executed as part of backend database queries. The issue is exploitable without authentication, significantly raising the risk.

Affected products

• Explorance Blue: before 8.14.9 (fixed in 8.14.9)

Published 2026-01-28. Last modified 2026-06-17.