{"id":"CVE-2025-1161","title":"Incorrect Use of Privileged APIs vulnerability in NomySoft Information Technology Training and Consulting Inc","summary":"Incorrect Use of Privileged APIs vulnerability in NomySoft Information Technology Training and Consulting Inc. Nomysem allows Privilege Escalation.\n\nThis issue affects Nomysem: through May 2025.","severity":"high","cvss":7.1,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-648"],"published":"2025-12-10","updated":"2026-10-14","sourceUpdated":"2026-10-14T21:10:00.183","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-1161","references":[{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0440","label":"iletisim@usom.gov.tr"},{"url":"https://www.usom.gov.tr/bildirim/tr-25-0440","label":"iletisim@usom.gov.tr"}],"tags":["nvd"],"epss":0.00211,"epssPercentile":0.10644,"ingestedAt":"2026-10-14T21:57:04.779Z","slug":"CVE-2025-1161","body":"## Overview\n\nIncorrect Use of Privileged APIs vulnerability in NomySoft Information Technology Training and Consulting Inc. Nomysem allows Privilege Escalation.\n\nThis issue affects Nomysem: through May 2025.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":39,"depthScoreParts":{"impact":39.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}