VULNERABILITY INTELLIGENCE
CVE-2026-34025
EPSS probability0.28%
CISA KEVNot currently listed
Published2026-06-15
Last modified2026-10-25
Description
The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains an IP restriction bypass vulnerability in the login process. The application restricts user logins based on the IP address associated with a branch location, but the client IP address is derived from the HTTP X-Forwarded-For header when that header is present. An attacker with valid branch user credentials can manipulate the X-Forwarded-For header during login to spoof the expected branch IP address and obtain a valid authenticated session from an unauthorized network location.
Weakness classification
- 551230f0-3615-47bd-b7cc-93e92e730bbf: CWE-290