cve.2025-57790 | Detection.FYI

Commvault QOperation Path Traversal Webshell Drop (CVE-2025-57790)

Oct 20, 2025 · attack.persistence attack.t1505.003 detection.emerging-threats cve.2025-57790 ·
Share on:

Detects the use of qoperation.exe with the -file argument to write a JSP file to the webroot, indicating a webshell drop. This is a post-authentication step corresponding to CVE-2025-57790.

Read More