CVE-2025-13506

Improper Authorization in Nebim Neyir's Nebim V3 ERP

CVSS 8.8 HIGHEPSS 0.4%CWE-250

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 8.8EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

12 Dec 2025Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Execution with Unnecessary Privileges vulnerability in Nebim Neyir Computer Industry and Services Inc. Nebim V3 ERP allows Expanding Control over the Operating System from the Database. This issue affects Nebim V3 ERP: from 2.0.59 before 3.0.1.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Nebim Neyir Computer Industry and Services Inc. · Nebim V3 ERP

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0450 https://www.usom.gov.tr/bildirim/tr-25-0450