CVE-2026-34027 MEDIUM

CVE-2026-34027: Upload restriction bypass in Wertheim SafeController Software allows authenticated users to upload arbitrary files

Vendor Wertheim Gmbh
Product Wertheim SafeController Software for VAULT ROOMS (Safe Deposit Locker System)
Weakness CWE-434 · Unrestricted file upload
Published June 15, 2026
Last update June 15, 2026
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains insufficient server-side file type validation in the /safe/contract/uploadcustomdocuments endpoint. The application validates uploaded files based on the user-controlled HTTP Content-Type value and accepts the upload if this value contains an allowed string such as pdf, jpeg, tiff, or png. An authenticated attacker with any role or permission level can spoof the Content-Type value and upload arbitrary file content.

Key dates

02Disclosure timeline

June 15, 2026 CVE published
June 15, 2026 Record updated