Is CVE-2026-34023 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-34023 being exploited in the wild.

How severe is CVE-2026-34023?

Informational severity, with a CVSS score of 7.1, published 15 June 2026.

Which products and versions are affected?

Wertheim SafeController Software AssemblyVersion 6.15.8328.28014.

Is there a fix for CVE-2026-34023?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-34023 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-34023?

Check whether you run Wertheim SafeController Software at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-34023: Wertheim SafeController incorrect authorization in WebSocket communication

CVE-2026-34023 · Severity: info · CVSS 7.1 · Published 2026-06-15

Wertheim SafeController is a professional software suite used by banks and financial institutions to manage safe deposit boxes and vault rooms. A security flaw in the system's communication protocol allows a staff member with low-level access at one branch to manipulate messages and gain control over safe deposit boxes or resources at other branches. This could lead to unauthorized access to physical security infrastructure and sensitive customer assets across different locations.

Technologies: Wertheim SafeController Software. Vendors: Wertheim.

Quick answers

Is CVE-2026-34023 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-34023 being exploited in the wild.
How severe is CVE-2026-34023?: Informational severity, with a CVSS score of 7.1, published 15 June 2026.
Which products and versions are affected?: Wertheim SafeController Software AssemblyVersion 6.15.8328.28014.
Is there a fix for CVE-2026-34023?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-34023 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-34023?: Check whether you run Wertheim SafeController Software at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An incorrect authorization vulnerability (CWE-863) exists in the WebSocket communication used by the Wertheim SafeController WebMessageBroker. The flaw resides in how the application validates controller identifiers within WebSocket messages. An authenticated attacker with low-privileged branch credentials can intercept and modify these messages, replacing their authorized branch/controller IDs with those of other branches. This bypasses intended logical isolation, allowing the attacker to invoke restricted functions, such as remotely activating or opening safe deposit boxes outside of their assigned jurisdiction. When combined with other vulnerabilities in the suite (such as path traversal or broken access control), this can contribute to a full system compromise.

Affected products

Wertheim SafeController Software AssemblyVersion 6.15.8328.28014

Timeline

2023-04-03: other: Vulnerability discovered by SEC Consult
2026-06-15: advisory: Public disclosure by SEC Consult and NVD publication

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.