Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-34028: Wertheim SafeController Software exposes sensitive files to internet

CVE-2026-34028 · published 4 months ago

Summary

The Wertheim SafeController Software has a security issue that allows anyone on the internet to access and download sensitive files without needing a password. This could lead to unauthorized access to confidential company information. To fix this, update to a newer version of the software or apply the necessary security patches.

Original advisory text

The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, exposes web-accessible file paths that are not protected by an authorization scheme. An unauthenticated attacker can directly access HTTP endpoints to download files from locations such as /Resources/CompanyId_[ID]/Audio/ and /SafeData/.

References

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

6.9 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-425Direct Request ('Forced Browsing')

Timeline

Published15 Jun 2026

Updated4 Nov 2026

First seen15 Jun 2026

Sources

CVE-2026-34028 · NVD

Track software like this

Free during beta