CVE-2026-34025 | BDVDB-2026-340280 Detail

Description#

The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains an IP restriction bypass vulnerability in the login process. The application restricts user logins based on the IP address associated with a branch location, but the client IP address is derived from the HTTP X-Forwarded-For header when that header is present. An attacker with valid branch user credentials can manipulate the X-Forwarded-For header during login to spoof the expected branch IP address and obtain a valid authenticated session from an unauthorized network location.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-06-15Record published in the CVE List.