CVE-2025-68391
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Oct 30, 2026
Vendor
unknown
Description
ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to arbitrary file upload. Any user is able to upload arbitrary file and override existing files in a temporary folder. This vulnerability might lead to execution of embedded JavaScript scripts when an authenticated user tries to download the uploaded file. This issue has been fixed in: PROTECTELMAJ v6.5.19 and BDF v6.4.67