CVE-2026-34025
IP restriction bypass in Wertheim SafeController Software allows logins from unauthorized network locations
- State
- Published
- Severity
- 5.3 Medium
- Published
- Jun 15, 2026
- Updated
- Jun 15, 2026
- Reserved
- Mar 25, 2026
Description
The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains an IP restriction bypass vulnerability in the login process. The application restricts user logins based on the IP address associated with a branch location, but the client IP address is derived from the HTTP X-Forwarded-For header when that header is present. An attacker with valid branch user credentials can manipulate the X-Forwarded-For header during login to spoof the expected branch IP address and obtain a valid authenticated session from an unauthorized network location.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.3 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N | SEC-VLab |
Weaknesses
- CWE-290 Authentication bypass by spoofing
Affected Products
| Product | Versions |
|---|---|
Wertheim SafeController Software for VAULT ROOMS (Safe Deposit Locker System)Wertheim GmbH |
|
References
- https://wertheim-safes.com/safe-deposit-box-management/product
- https://r.sec-consult.com/wertheimthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.