CVE-2025-14018

Unquoted Service Path in NetBT Consultancy's e-Fatura

Unquoted Search Path or Element vulnerability in NetBT Consulting Services Inc. E-Fatura allows Leveraging/Manipulating Configuration File Search Paths, Redirect Access to Libraries. This issue affects e-Fatura: before 1.2.15.

Affected

NetBT Consulting Services Inc. · e-Fatura

CVSS v3.1 USOM

7.3 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

EPSS

0.45% chance of exploitation in the next 30 days, 38th percentile

Published

2025-12-22

Updated

2026-06-04

Proof-of-concept exploits (1)

• kaleth4/CVE-2025-140180★ · 2026-04-11

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/52509

References

• CVE Record
• NVD entry

Related

• CVE-2014-6271
• CVE-2019-7711
• CVE-2021-44228
• CVE-2022-30190
• CVE-2024-6387
• CVE-2024-6409