What is GHSA-vrc8-q26c-67p3?

GHSA-vrc8-q26c-67p3 is a security advisory published by GitHub Security Advisories with Medium severity. The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, exposes web-accessible...

Which CVE IDs does GHSA-vrc8-q26c-67p3 cover?

GHSA-vrc8-q26c-67p3 covers the following CVE IDs: CVE-2026-34028. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-vrc8-q26c-67p3Medium

The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, exposes web-accessible...

Vendor

GitHub Security Advisories

Published

June 15, 2026

Last Modified

June 15, 2026

🔗 CVE IDs covered (1)

CVE-2026-34028 →

📋 Description

The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, exposes web-accessible file paths that are not protected by an authorization scheme. An unauthenticated attacker can directly access HTTP endpoints to download files from locations such as /Resources/CompanyId_[ID]/Audio/ and /SafeData/.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-34028
https://r.sec-consult.com/wertheim
https://wertheim-safes.com/safe-deposit-box-management
https://github.com/advisories/GHSA-vrc8-q26c-67p3