QwikSec

Security Database

CVE

CWE

Training

CVE-2025-57792

Published: Jan 28, 2026

Modified: Jan 28, 2026

PUBLISHED

Description

Explorance Blue versions prior to 8.14.9 contain a SQL injection vulnerability caused by insufficient validation of user input in a web application endpoint. An attacker can supply crafted input that is executed as part of backend database queries. The issue is exploitable without authentication, significantly raising the risk.

Vendor	Product	Versions
Explorance	Blue	affected `0 - < 8.14.9`

Weaknesses (CWE)

References

https://www.explorance.com/products/blue

product

https://online-help.explorance.com/blue/articles/security-advisories-(january-2026)

vendor-advisory

https://online-help.explorance.com/blue/articles/security-advisory:-cve-2025-57792

vendor-advisory

https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0001.md

third-party-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.