CVE2025

CVE-2025-57788

1Rules

1References

1Folders

2025-10-20Latest

Summary

CVE-2025-57788 is tracked here through 1 Sigma detection for exploitation attempts and related post-exploitation behavior observed in 2025. Coverage centers on windows / process_creation.

Related Detections

Search this threat

Emerging Threatmediumexperimental

Commvault QLogin with PublicSharingUser and GUID Password (CVE-2025-57788)

Detects a qlogin.exe command attempting to authenticate as the internal `_+_PublicSharingUser_` using a GUID as the password. This could be an indicator of an attacker exploiting CVE-2025-57788 to gain initial access using leaked credentials.

WindowsProcess Creation

TA0004 · Privilege EscalationTA0003 · PersistenceTA0005 · StealthTA0001 · Initial Access+3

Swachchhanda Shrawan Poudel (Nextron Systems)Mon Oct 202025

References

Resolving title…

labs.watchtowr.com