Wertheim SafeController Software for VAULT ROOMS 6.15.8328.28014 Header X-Forwarded-For authentication spoofing

Summaryinfo

A vulnerability classified as critical has been found in Wertheim SafeController Software for VAULT ROOMS 6.15.8328.28014. Affected by this vulnerability is an unknown functionality of the component Header Handler. Performing a manipulation of the argument X-Forwarded-For results in authentication spoofing. This vulnerability is reported as CVE-2026-34025. The attack is possible to be carried out remotely. No exploit exists.

Detailsinfo

A vulnerability was found in Wertheim SafeController Software for VAULT ROOMS 6.15.8328.28014. It has been classified as critical. This affects some unknown processing of the component Header Handler. The manipulation of the argument X-Forwarded-For with an unknown input leads to a authentication spoofing vulnerability. CWE is classifying the issue as CWE-290. This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains an IP restriction bypass vulnerability in the login process. The application restricts user logins based on the IP address associated with a branch location, but the client IP address is derived from the HTTP X-Forwarded-For header when that header is present. An attacker with valid branch user credentials can manipulate the X-Forwarded-For header during login to spoof the expected branch IP address and obtain a valid authenticated session from an unauthorized network location.

The weakness was disclosed by Christian Hager. It is possible to read the advisory at wertheim-safes.com. This vulnerability is uniquely identified as CVE-2026-34025 since 03/25/2026. The exploitability is told to be easy. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. Technical details of the vulnerability are known, but there is no available exploit. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 06/15/2026).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• Wertheim

Name

• SafeController Software for VAULT ROOMS

Version

• 6.15.8328.28014

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion