Auth bypass in Wertheim Gmbh Safecontroller Software For Vault Rooms (Safe Deposit Locker System)
CVE-2026-34024
The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains missing authorization checks on multiple web application endpoints. An authenticated attacker with minimal privileges can access endpoints that are not visible…
Vulnerability class: Broken Access Control
EPSS: 0.003 (22.7th percentile) — read the EPSS interpretation.
Affected products
- Wertheim Gmbh Safecontroller Software For Vault Rooms (Safe Deposit Locker System) — versions Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014
Weakness classification (CWE)
References
- 551230f0-3615-47bd-b7cc-93e92e730bbf (product)
- 551230f0-3615-47bd-b7cc-93e92e730bbf (third-party-advisory)