Phoenix
Sigma IntelligenceBeta
Emerging Threats
CVE2025

CVE-2025-57791

1Rules
1References
1Folders
2025-10-20Latest
Summary

CVE-2025-57791 is tracked here through 1 Sigma detection for exploitation attempts and related post-exploitation behavior observed in 2025. Coverage centers on windows / process_creation.

Related Detections
Search this threat
Emerging Threathighexperimental

Commvault QLogin Argument Injection Authentication Bypass (CVE-2025-57791)

Detects the use of argument injection in the Commvault qlogin command - potential exploitation for CVE-2025-57791. An attacker can inject the `-localadmin` parameter via the password field to bypass authentication and gain a privileged token.

WindowsProcess Creation
TA0001 · Initial AccessT1190 · Exploit Public-Facing Applicationdetection.emerging-threatscve.2025-57791
X__Junior (Nextron Systems)+1Mon Oct 202025
References
1
Resolving title…
labs.watchtowr.com