https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 17:08:50 +0000 https://cve.radiocsirt.org/vuln/cve-2026-34025 <p><strong>Affected:</strong> Wertheim GmbH Wertheim SafeController Software for VAULT ROOMS (Safe Deposit Locker System)</p> <p>The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains an IP restriction bypass vulnerability in the login process. The application restricts user logins based on the IP address associated with a branch location, but the client IP address is derived from the HTTP X-Forwarded-For header when that header is present. An attacker with valid branch user credentials can manipulate the X-Forwarded-For header during login to spoof the expected branch IP address and obtain a valid authenticated session from an unauthorized network location.</p> <p><strong>Affected:</strong> Wertheim GmbH Wertheim SafeController Software for VAULT ROOMS (Safe Deposit Locker System)</p> <p>The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains an IP restriction bypass vulnerability in the login process. The application restricts user logins based on the IP address associated with a branch location, but the client IP address is derived from the HTTP X-Forwarded-For header when that header is present. An attacker with valid branch user credentials can manipulate the X-Forwarded-For header during login to spoof the expected branch IP address and obtain a valid authenticated session from an unauthorized network location.</p> https://cve.radiocsirt.org/vuln/cve-2026-34025