Arbitrary file upload in Wertheim Gmbh Safecontroller Software For Vault Rooms (Safe Deposit Locker System)

CVE-2026-34027

The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains insufficient server-side file type validation in the /safe/contract/uploadcustomdocuments endpoint. The application validates uploaded files based on the user-…

Vulnerability class: Unrestricted File Upload

EPSS: 0.003 (22.8th percentile) — read the EPSS interpretation.