---
id: CVE-2025-14018
title: Unquoted Search Path or Element vulnerability in NetBT Consulting Services Inc
summary: >-
  Unquoted Search Path or Element vulnerability in NetBT Consulting Services
  Inc. E-Fatura allows Leveraging/Manipulating Configuration File Search Paths,
  Redirect Access to Libraries.


  This issue affects e-Fatura: before 1.2.15.
severity: high
cvss: 7.3
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L'
cwe:
  - CWE-428
published: '2025-12-22'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T19:10:00.297'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-14018'
references:
  - url: 'https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0474'
    label: iletisim@usom.gov.tr
  - url: 'https://www.usom.gov.tr/bildirim/tr-25-0474'
    label: iletisim@usom.gov.tr
tags:
  - nvd
  - exploit-available
epss: 0.00448
epssPercentile: 0.37375
exploits:
  exploitdb: true
  github: 1
  githubRepos:
    - 'https://github.com/kaleth4/CVE-2025-14018'
  checkedAt: '2026-10-14T19:50:33.266Z'
exploitAvailable: true
ingestedAt: '2026-10-14T19:49:57.536Z'
---

## Overview

Unquoted Search Path or Element vulnerability in NetBT Consulting Services Inc. E-Fatura allows Leveraging/Manipulating Configuration File Search Paths, Redirect Access to Libraries.

This issue affects e-Fatura: before 1.2.15.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.