These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-34028 is a medium-severity vulnerability in Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014. The vulnerability exposes web-accessible file paths that are not protected by an authorization scheme, allowing an unauthenticated attacker to directly access HTTP endpoints to download files from locations such as /Resources/CompanyId_[ID]/Audio/ and /SafeData/. The CVSS score for this [truncated]
CVE-2026-34027 debrief based on the supplied source corpus. The vulnerability is a medium-severity issue in Wertheim SafeController Software, allowing authenticated attackers to upload arbitrary file content due to insufficient server-side file type validation. This could lead to unauthorized access and potential system compromise. Defenders should assess exposure, verify file upload validation, and revie [truncated]
CVE-2026-34026 is a path traversal vulnerability in Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014. The vulnerability exists in the documentName parameter of the /safe/selfservice/openselfservicedocument endpoint. An authenticated attacker with any role or permission level can exploit this vulnerability to traverse out of the intended document directory and download arbitrary files acce [truncated]
The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains an IP restriction bypass vulnerability in the login process. The application restricts user logins based on the IP address associated with a branch location, but the client IP address is derived from the HTTP X-Forwarded-For header when that header is present. An attacker with valid branch user credentials can manipulate the X [truncated]
The CVE-2026-34024 vulnerability affects Wertheim SafeController Software for VAULT ROOMS (Safe Deposit Locker System). An authenticated attacker with minimal privileges can access multiple web application endpoints that are not visible in the frontend but remain directly reachable, allowing restricted actions such as switching the user's branch, uploading arbitrary files, downloading arbitrary files, and [truncated]
CVE-2026-34023 is an incorrect authorization vulnerability in Wertheim SafeController Software AssemblyVersion 6.15.8328.28014. An authenticated low-privileged attacker can manipulate WebSocket messages to access restricted functions and resources in other branches. This vulnerability allows attackers to potentially activate boxes outside of their authorized branch, emphasizing the need for defenders to v [truncated]
The Wertheim SafeController Family 65000, Controller 65000 - AssemblyVersion 6.11.8130.22319, uses weak custom cryptographic algorithms with hard-coded cryptographic keys to protect communication. An attacker in an adversary-in-the-middle position can decrypt the data traffic. The vulnerability allows for potential decryption of data traffic, which may lead to unauthorized access to sensitive information. [truncated]
The Wertheim SafeController 5400, specifically Controller 5400 - AssemblyVersion 6.11.8130.22320, has a security vulnerability due to its use of RS-485 communication between the server and the microcontroller without cryptographic protection. This lack of protection allows an attacker with access to the communication path to sniff RS-485 messages and replay previously observed messages. Such an attack can [truncated]
