Security advisory: CVE-2025-57795
Published: 2026-01-28
Summary
A third-party security advisory identified a vulnerability related to remote file handling in a service component affecting certain versions of Explorance Blue. Explorance assessed the issue, implemented corrective measures, and resolved the issue. There is no evidence that this issue has been exploited in the wild.
Affected versions
Explorance Blue versions prior to 8.14.13. Versions 8.14.13 and later are not affected.
Deployment applicability
- Explorance-hosted (SaaS): No customer action required.
- Self-hosted: Affected if running a vulnerable version.
Impact
If exploited, this issue could have allowed unintended access or behavior within the application. This could have allowed execution of unauthorized code under certain conditions. No customer data compromise has been identified.
Resolution
The issue has been resolved in Explorance Blue version 8.14.13. Remote file retrieval and validation controls were strengthened.
Customer action
- SaaS customers: No action required.
- Self-hosted customers: Upgrade to Explorance Blue version 8.14.13 or later.
Timeline
- Issue reported: 2025-05-28
- Patch released: 2025-09-30
References
Third-party CVE publication: https://www.cve.org/CVERecord?id=CVE-2025-57795
Support
Customers with questions or concerns should contact support@explorance.com.
Acknowledgment
Explorance thanks Abdulrahman Nour of Mandiant (Google Cloud) for responsibly reporting this vulnerability.