Description
Explorance Blue versions prior to 8.14.9 contain a SQL injection vulnerability caused by insufficient validation of user input in a web application endpoint. An attacker can supply crafted input that is executed as part of backend database queries. The issue is exploitable without authentication, significantly raising the risk.
References (4)
Core 4
Core References
Product product
https://www.explorance.com/products/blue
Vendor Advisory vendor-advisory
https://online-help.explorance.com/blue/articles/security-advisories-(january-2026)
Vendor Advisory vendor-advisory
https://online-help.explorance.com/blue/articles/security-advisory:-cve-2025-57792
Third Party Advisory third-party-advisory
https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0001.md
Scores
CVSS v3
10.0
EPSS
0.0012
EPSS Percentile
30.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
total
Details
CWE
CWE-89
Status
published
Products (1)
explorance/blue
< 8.14.9
Published
Jan 28, 2026
Tracked Since
Feb 18, 2026