ExploitPublished
NetBT e-Fatura - Privilege Escalation
Source Exploit-DB RSS Feed
0
Mentioned vulnerabilities
Severity
HighRated by Threat Radar
Data as of 22 Apr 2026, 07:07 UTC
What to do
AI-suggested
Until an official fix is available, restrict write permissions to the directory 'C:\inetpub\wwwroot\InboxProcessor\' to prevent unauthorized modifications. Avoid running the InboxProcessor service with LocalSystem privileges if possible, or apply least privilege principles. Monitor for suspicious activity related to this service.
Description
NetBT e-Fatura - Privilege Escalation
Indicators of compromise
Exploit source code
# Exploit Title: NetBT e-Fatura - Privilege Escalation
# Author: Seccops
# Discovery Date: 2025-10-03
# Vendor: https://net-bt.com.tr/e-fatura/
# Tested Version: 2024
# Tested on OS: Microsoft Windows Server 2019 DC
# Vulnerability Type: CWE-428 Unquoted Search Path or Element
# CVE: CVE-2025-14018
Note: Thanks "Levent Sungu" for providing the testing environment.
====================
Description & Impact
====================
This vulnerability allows an unauthorized local user to execute arbi…References
Community reviews
Loading reviews…