CVE Feed

    Dashboard / CVE / CVE-2026-34024

    CVE-2026-34024

    The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains missing authorization checks on multiple web application endpoints. An authenticated attacker with minimal privileges can access endpoints that are not visible in the frontend but remain directly reachable. This allows the attacker to perform restricted actions such as switching the user's branch, uploading arbitrary files, downloading arbitrary files, and viewing details of arbitrary branches.

    Published:Jun 15, 2026
    Last Modified:Jun 23, 2026
    EPS:Jun 15, 2026
    EPSS Score:0.00304
    CVSS Score:8.6

    Affected Products

    Vendor
    Wertheim
    Product
    Safecontroller Software For Vault Rooms (safe Deposit Locker System)

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-862 Missing Authorization

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-665 Exploitation of Thunderbolt Protection Flaws

    Related CVEs

    CVE-2026-34030 (CVSS 6.9) — The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, does not sufficiently validate the bran…
    CVE-2026-34029 (CVSS 6.8) — The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains a hard-coded cryptographic key…
    CVE-2026-34028 (CVSS 6.9) — The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, exposes web-accessible file paths that …
    CVE-2026-34027 (CVSS 5.3) — The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains insufficient server-side file …
    CVE-2026-34026 (CVSS 7.1) — Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains a path traversal vulnerability in …
    CVE-2026-34025 (CVSS 5.3) — The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains an IP restriction bypass vulne…
    CVE-2026-34023 (CVSS 7.1) — The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains an incorrect authorization vul…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High