Vulnerability · Published Dec 12, 2025 · Assigned by TR-CERT
CVE-2025-13506Improper Authorization in Nebim Neyir's Nebim V3 ERP
High 8.8
In plain English
A high-severity security flaw in Nebim V3 ERP from Nebim Neyir Computer Industry and Services Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 35% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.4%top 64.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Execution with Unnecessary Privileges vulnerability in Nebim Neyir Computer Industry and Services Inc. Nebim V3 ERP allows Expanding Control over the Operating System from the Database. This issue affects Nebim V3 ERP: from 2.0.59 before 3.0.1.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Nebim Neyir Computer Industry and Services Inc. | Nebim V3 ERP | 2.0.59 – before 3.0.1 |
Weakness: CWE-250 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- https://www.usom.gov.tr/bildirim/tr-25-0450 government-resource, broken-link
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0450 government-resource