The vulnerability identified as CVE-2025-52800 affects The E-Commerce ERP software from Unity Business Technology Pty Ltd. It is a Missing Authorization issue where certain functionality is accessible without proper ACL enforcement, potentially allowing unauthorized users to perform actions they should not be permitted to. The affected versions are up to 2.1.1.3. The CVSS 3.1 base score is 7.3, reflecting a high-severity issue exploitable remotely without authentication or user interaction. No patch or official remediation information is provided in the available data.

Successful exploitation of this vulnerability could allow an unauthenticated attacker to access or invoke functionality within The E-Commerce ERP that should be restricted, potentially leading to limited confidentiality, integrity, and availability impacts as indicated by the CVSS vector (C:L/I:L/A:L). However, no known exploits in the wild have been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected ERP system to trusted users and monitor for unusual activity related to unauthorized access attempts. Avoid exposing the affected versions to untrusted networks.