CVE-2026-34028

The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, exposes web-accessible file paths that are not protected by an authorization scheme. An unauthenticated attacker can directly access HTTP endpoints to download files from locations such as /Resources/CompanyId_[ID]/Audio/ and /SafeData/.

CVSS

No CVSS.

References

Link	Resource
https://r.sec-consult.com/wertheim
https://wertheim-safes.com/safe-deposit-box-management/

Configurations

No configuration.

History

25 Oct 2026, 23:10

Type	Values Removed	Values Added
Summary		(es) El software Wertheim SafeController, AssemblyVersion 6.15.8328.28014, expone rutas de archivo accesibles por web que no están protegidas por un esquema de autorización. Un atacante no autenticado puede acceder directamente a puntos finales HTTP para descargar archivos desde ubicaciones como /Resources/CompanyId_[ID]/Audio/ y /SafeData/.

Information

Published : 2026-06-15 12:16

Updated : 2026-10-25 23:10

NVD link : CVE-2026-34028

Mitre link : CVE-2026-34028

CVE.ORG link : CVE-2026-34028

JSON object : View

Products Affected

No product.

CWE

CWE-425

Direct Request ('Forced Browsing')

{"id": "CVE-2026-34028", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-34028", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-15T12:31:22.590775Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "551230f0-3615-47bd-b7cc-93e92e730bbf", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.9, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "551230f0-3615-47bd-b7cc-93e92e730bbf", "affectedData": [{"vendor": "Wertheim GmbH", "product": "Wertheim SafeController Software for VAULT ROOMS (Safe Deposit Locker System)", "versions": [{"status": "affected", "version": "Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014"}], "defaultStatus": "unknown"}]}], "published": "2026-06-15T12:16:25.367", "references": [{"url": "https://r.sec-consult.com/wertheim", "source": "551230f0-3615-47bd-b7cc-93e92e730bbf"}, {"url": "https://wertheim-safes.com/safe-deposit-box-management/", "source": "551230f0-3615-47bd-b7cc-93e92e730bbf"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "551230f0-3615-47bd-b7cc-93e92e730bbf", "description": [{"lang": "en", "value": "CWE-425"}]}], "descriptions": [{"lang": "en", "value": "The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, exposes web-accessible file paths that are not protected by an authorization scheme. An unauthenticated attacker can directly access HTTP endpoints to download files from locations such as /Resources/CompanyId_[ID]/Audio/ and /SafeData/."}, {"lang": "es", "value": "El software Wertheim SafeController, AssemblyVersion 6.15.8328.28014, expone rutas de archivo accesibles por web que no est\u00e1n protegidas por un esquema de autorizaci\u00f3n. Un atacante no autenticado puede acceder directamente a puntos finales HTTP para descargar archivos desde ubicaciones como /Resources/CompanyId_[ID]/Audio/ y /SafeData/."}], "lastModified": "2026-10-25T23:10:00.167", "sourceIdentifier": "551230f0-3615-47bd-b7cc-93e92e730bbf"}