Privilege Escalation in ARKETEAM Protectel Modules
CVE-2025-68392

5.1MEDIUM

Key Information:

Vendor

Arketeam

Status
Protectelmaj
Bdf
Vendor
CVE Published:
30 October 2026

What is CVE-2025-68392?

A vulnerability in ARKETEAM Protectel modules PROTECTELMAJ and BDF allows low privileged users to access functionalities intended for admin users. This occurs through forged direct requests to a specific API endpoint, potentially leading to unauthorized access and modifications. This issue has been addressed in updates, with version PROTECTELMAJ v6.5.19 and BDF v6.4.67 providing necessary security enhancements to prevent such exploits.

Affected Version(s)

BDF 0 < 6.4.67

PROTECTELMAJ 0 < 6.5.19

References

https://protectel.arketeam.com/
product
https://cert.pl/en/posts/2026/10/CVE-2025-68391/
third-party-advisory

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Karol Miring
.