Vulnerabilities in Wertheim GmbH
10 resultsCVE-2026-34028MEDIUMUnauthenticated direct access to web data in Wertheim SafeController Software exposes filesEPSS 0.4%CVE-2026-34026HIGHPath traversal in Wertheim SafeController Software allows authenticated users to download arbitrary filesEPSS 0.4%CVE-2026-34023HIGHBroken WebSocket authorization in Wertheim SafeController Software allows cross-branch access to restricted functionsEPSS 0.3%CVE-2026-34030MEDIUMImproper branch-code validation in Wertheim SafeController Software allows file path manipulationEPSS 0.3%CVE-2026-34027MEDIUMUpload restriction bypass in Wertheim SafeController Software allows authenticated users to upload arbitrary filesEPSS 0.3%CVE-2026-34024HIGHMissing authorization checks in Wertheim SafeController Software allow low-privileged users to access restricted functionsEPSS 0.3%CVE-2026-34025MEDIUMIP restriction bypass in Wertheim SafeController Software allows logins from unauthorized network locationsEPSS 0.3%CVE-2026-34021HIGHLack of cryptographic protection in Wertheim SafeController 5400 enables RS-485 message sniffing and replayEPSS 0.2%CVE-2026-34029MEDIUMHard-coded cryptographic key in Wertheim SafeController Software allows decryption of sensitive configuration dataEPSS 0.1%CVE-2026-34022HIGHWeak custom cryptography and hard-coded keys in Wertheim SafeController 65000 allow traffic decryptionEPSS 0.1%