Vulnerability · Published Jun 15, 2026 · Assigned by SEC-VLab
CVE-2026-34025IP restriction bypass in Wertheim SafeController Software allows logins from unauthorized network locations
Medium 5.3
In plain English
A medium-severity authentication bypass by spoofing in Wertheim SafeController Software for VAULT ROOMS (Safe Deposit Locker System) from Wertheim GmbH. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).
Official description
The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains an IP restriction bypass vulnerability in the login process. The application restricts user logins based on the IP address associated with a branch location, but the client IP address is derived from the HTTP X-Forwarded-For header when that header is present. An attacker with valid branch user credentials can manipulate the X-Forwarded-For header during login to spoof the expected branch IP address and obtain a valid authenticated session from an unauthorized network location.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Wertheim GmbH | Wertheim SafeController Software for VAULT ROOMS (Safe Deposit Locker System) | Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014 |
Weakness: CWE-290 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
References
- https://wertheim-safes.com/safe-deposit-box-management/ product
- https://r.sec-consult.com/wertheim third-party-advisory