CVE-2025-68391

MEDIO 5.3CVE-2025-68391 · Published 30/10/2026 · updated 04/11/2026

En resumen

CVE-2025-68391 es una vulnerabilidad MEDIO (CVSS 5.3).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.24%, mayor que el 14.5% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to arbitrary file upload. Any user is able to upload arbitrary file and override existing files in a temporary folder. This vulnerability might lead to execution of embedded JavaScript scripts when an authenticated user tries to download the uploaded file. This issue has been fixed in: PROTECTELMAJ v6.5.19 and BDF v6.4.67

References

cert.pl/en/posts/2026/10/CVE-2025-68391
protectel.arketeam.com

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free