CVE-2025-14018

published 2025-12-22

CVE-2025-14018: Unquoted Search Path or Element vulnerability in NetBT Consulting Services Inc. E-Fatura allows Leveraging/Manipulating Configuration File Search Paths…

Priority P3 46 high 7.3 CVSS 3.1

AV L AC L PR L UI N S U C H I H A L

EXPLOIT

Unquoted Search Path or Element vulnerability in NetBT Consulting Services Inc. E-Fatura allows Leveraging/Manipulating Configuration File Search Paths, Redirect Access to Libraries.

This issue affects e-Fatura: before 1.2.15.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
netbt_consulting_services_inc	e-fatura	< 1.2.15	1.2.15

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-428