What is the CVSS score of CVE-2025-13506?

CVE-2025-13506 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Nebim Neyir Computer Industry are affected by CVE-2025-13506?

Nebim V3 ERP versions 2.0.59 through 3.0.0 contain a privilege escalation vulnerability allowing authenticated database users to achieve operating system-level control of the ERP server, risking…

How to fix or mitigate CVE-2025-13506?

Within 24 hours: Audit all Nebim V3 ERP deployments and document exact versions; immediately revoke shared database credentials and restrict database access exclusively to dedicated, minimally-privileged service accounts; review access logs for unauthorized database activity. Within 7 days: Implement network segmentation isolating the Nebim database server from general user networks using firewall rules; configure comprehensive audit logging and alerting on all database connections and privilege changes; contact Nebim support via CERT-TR advisory TR-25-0450 for patch status and expected release date. Within 30 days: Execute remediation plan-either deploy patched Nebim version once released, or if no patch timeline provided, evaluate business case for ERP replacement or decommissioning of affected deployments.

Nebim Neyir Computer Industry CVE-2025-13506

HIGH

Execution with Unnecessary Privileges (CWE-250)

2025-12-12 iletisim@usom.gov.tr

Privilege Escalation

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jun 04, 2026 - 07:34 vuln.today

DescriptionCVE.org

Execution with Unnecessary Privileges vulnerability in Nebim Neyir Computer Industry and Services Inc. Nebim V3 ERP allows Expanding Control over the Operating System from the Database.

This issue affects Nebim V3 ERP: from 2.0.59 before 3.0.1.

AnalysisAI

Privilege escalation in Nebim V3 ERP versions 2.0.59 through 3.0.0 lets an authenticated database-level attacker pivot from SQL access to operating-system control because the application stack executes with unnecessary privileges (CWE-250). Reported through Turkey's USOM/CERT-TR (advisory TR-25-0450), the issue carries CVSS 8.8 (AV:N/AC:L/PR:L/UI:N/C:H/I:H/A:H), and there is no public exploit identified at time of analysis, with EPSS at 0.09% (26th percentile).