CVE-2026-34028 PUBLISHED

Unauthenticated direct access to web data in Wertheim SafeController Software exposes files

Assigner: SEC-VLab
Reserved: 25.03.2026 Published: 15.06.2026 Updated: 15.06.2026

The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, exposes web-accessible file paths that are not protected by an authorization scheme. An unauthenticated attacker can directly access HTTP endpoints to download files from locations such as /Resources/CompanyId_[ID]/Audio/ and /SafeData/.

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
CVSS Score: 6.9

Product Status

Vendor Wertheim GmbH
Product Wertheim SafeController Software for VAULT ROOMS (Safe Deposit Locker System)
Versions Default: unknown
  • Version Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014 is affected

Workarounds

Restrict unauthenticated access to web-accessible resource and file-storage paths. Ensure that /Resources/, /SafeData/, and similar storage locations are protected by authorization checks where appropriate. Store user-uploaded or application-generated files outside of web-executable directories. Configure the web server so that uploaded or stored files cannot be interpreted as server-side executable code. These measures should only be treated as interim risk reduction; the vendor-provided patch should be installed.

Solutions

The vendor provides a patch which should be installed immediately. Specific fixed version information was not provided. Affected parties should contact the vendor to request the update.

Credits

  • Christian Hager, SEC Consult Vulnerability Lab finder
  • Gorazd Jank, SEC Consult Vulnerability Lab finder
  • Philipp Espernberger, SEC Consult Vulnerability Lab finder

References

Problem Types

  • CWE-425 Direct request ('forced browsing') CWE

Impacts

  • CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs