CVE-2026-34026

Name of the Vulnerable Software and Affected Versions Wertheim SafeController Software version 6.15.8328.28014

Description An issue exists where the application constructs a file path using input provided by the user without sufficient validation. This allows an authenticated attacker, regardless of their role or permission level, to traverse outside the intended document directory and download arbitrary files accessible to the application, such as application binaries and log files containing sensitive information. The issue is located in the '/safe/selfservice/openselfservicedocument' endpoint via the documentName parameter.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.