CVE-2026-34028: Wertheim GmbH Wertheim Safecontroller Software For Vault Rooms Safe Deposit Locker System

Medium severity, CVSS 6.9. EPSS: 0.5% chance of exploitation in the next 30 days.

The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, exposes web-accessible file paths that are not protected by an authorization scheme. An unauthenticated attacker can directly access HTTP endpoints to download files from locations such as /Resources/CompanyId_[ID]/Audio/ and /SafeData/.

Affected products

• Wertheim GmbH Wertheim Safecontroller Software For Vault Rooms Safe Deposit Locker System

Published 2026-06-15. Last modified 2026-06-17.