CVE2025

CVE-2025-57790

1Rules

1References

1Folders

2025-10-20Latest

Summary

CVE-2025-57790 is tracked here through 1 Sigma detection for exploitation attempts and related post-exploitation behavior observed in 2025. Coverage centers on windows / process_creation.

Related Detections

Search this threat

Emerging Threathighexperimental

Commvault QOperation Path Traversal Webshell Drop (CVE-2025-57790)

Detects the use of qoperation.exe with the -file argument to write a JSP file to the webroot, indicating a webshell drop. This is a post-authentication step corresponding to CVE-2025-57790.

WindowsProcess Creation

TA0003 · PersistenceT1505.003 · Web Shelldetection.emerging-threatscve.2025-57790

Swachchhanda Shrawan Poudel (Nextron Systems)Mon Oct 202025

References

Resolving title…

labs.watchtowr.com