This vulnerability (CVE-2025-13506) affects Nebim V3 ERP versions starting from 2.0.59 before 3.0.1. It is characterized as an execution with unnecessary privileges issue (CWE-250), which enables an attacker to escalate privileges and gain expanded control over the underlying operating system via the database. The CVSS v3.1 base score is 8.8, indicating a high impact with network attack vector, low attack complexity, required privileges at the low level, no user interaction, and high confidentiality, integrity, and availability impacts. There is no indication that this is a cloud service, and no known exploits in the wild have been reported. No patch or vendor advisory is currently available.

Successful exploitation of this vulnerability could allow an attacker with limited privileges on the database to execute code or commands with higher privileges on the operating system, potentially leading to full system compromise. The confidentiality, integrity, and availability of the affected system could be severely impacted. No known exploits in the wild have been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor vendor communications closely. Until a fix is available, consider restricting database access privileges to trusted users only and applying the principle of least privilege to limit potential exploitation.