CVE-2025-68392

UNKNOWN 0.0

Incorrect authorization in Protectel

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

ARKETEAM Protectel modules PROTECTELMAJ and BDF allow low privileged users to use some of the functionalities reserved for admin users by forging direct requests to a specific endpoint. This issue has been fixed in: PROTECTELMAJ v6.5.19 and BDF v6.4.67

CWE	CWE-863
Vendor	arketeam
Product	protectelmaj
Published	Oct 30, 2026

Stay Ahead of the Next One

Get instant alerts for arketeam protectelmaj

Be the first to know when new unknown vulnerabilities affecting arketeam protectelmaj are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

ARKETEAM / PROTECTELMAJ

0 < 6.5.19

ARKETEAM / BDF

0 < 6.4.67

References

NVD ↗ CVE.org ↗ EPSS Data ↗

protectel.arketeam.com: https://protectel.arketeam.com/ cert.pl: https://cert.pl/en/posts/2026/10/CVE-2025-68391/

Credits

Karol Miring