Back to overview

CVE-2026-34026

HIGH
7.1
CVSS 4.0
Description
Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains a path traversal vulnerability in the documentName parameter of the /safe/selfservice/openselfservicedocument endpoint. The application constructs a file path using attacker-controlled input without sufficient validation, allowing an authenticated attacker with any role or permission level to traverse out of the intended document directory and download arbitrary files accessible to the application. This includes, but is not limited to, application log files containing sensitive information and application binaries.

Metadata

CVE ID
CVE-2026-34026
State
PUBLISHED
Assigner
SEC-VLab
Reserved
2026-03-25 10:46 UTC
Published
2026-06-15 10:04 UTC
Last updated
2026-06-15 12:29 UTC
Primary CWE
CWE-23
CWE-23 Relative path traversal
Vendor / Product
Wertheim GmbH / Wertheim SafeController Software for VAULT ROOMS (Safe Deposit Locker System)
Sources
cve.org  ·  NVD

Severity & Metrics

7.1 HIGH CVSS 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
SSVC — CISA Coordinator
Exploitation
none
Automatable
no
Tech. Impact
partial
Affected products (1)
VendorProductPlatformVersions
Wertheim GmbH Wertheim SafeController Software for VAULT ROOMS (Safe Deposit Locker System) — Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014
Weakness (CWE)
CWESourceDescription
CWE-23 cna CWE-23 Relative path traversal
CVSS scores (1)
ScoreSeverityVersionSourceVector
7.1 HIGH 4.0 cna CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
References (2)
Back to overview