VulnSocial

CVE-2026-34024Disclosure

LOWCVSS 8.6 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains missing authorization checks on multiple web application endpoints. An authenticated attacker with minimal privileges can access endpoints that are not visible in the frontend but remain directly reachable. This allows the attacker to perform restricted actions such as switching the user's branch, uploading arbitrary files, downloading arbitrary files, and viewing details of arbitrary branches.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-862

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 4 signals
  • Disclosure: 4 classified signals
  • Peaked 1d ago at 3 mentions (2026-06-15); latest day: 1
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-06-15: 3Mentions · 2026-06-17: 1Technical Details · 2026-06-15: 3Technical Details · 2026-06-17: 106-1506-17
Signal classification1 categories
Disclosure
4100.0%
Referenced assets5 URLs
Classification over time
DateTotalLabels
2026-06-153
Disclosure3
2026-06-171
Disclosure1
Full discourse4 posts
  • Cyber Threat Observatory | Alan Turing Institute@TuringCyberObs
    Disclosure

    CVE-2026-34024 (Wertheim SafeController) is a high-severity authorisation flaw allowing access beyond assigned permissions. See full analysis: https://github.com/alan-turing-institute/cyber-threat-observatory/blob/main/reports/2026-06-15/TIER_2_CVE-2026-34024.md #CyberSecurity #FinancialSecurity #DPI #AccessControl #BankingSecurity

    Post summary

    The text announces CVE-2026-34024 as a high‑severity authorization flaw that grants unauthorized access, but does not provide exploit code, active usage, patches, or a PoC.

    0000040
    53 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-34024 The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains missing authorization checks on multiple web application endpoints. An authenticated a… https://www.cve.org/CVERecord?id=CVE-2026-34024 ----- Traducción: CVE-2026-34024 El … http://infoflow.cloud`

    Post summary

    The tweet announces the CVE-2026-34024 vulnerability, indicating missing authorization checks on the Wertheim SafeController software, without providing any PoC, exploit, or remediation details.

    0000018
    79 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-34024 The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains missing authorization checks on multiple web application endpoints. An authenticated a… https://www.cve.org/CVERecord?id=CVE-2026-34024

    Post summary

    The post announces a newly disclosed CVE-2026-34024 in Wertheim SafeController software, highlighting missing authorization checks across several web endpoints, with no evidence of exploitation, PoC, or patch availability.

    00000153
    57.6K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-34024 Missing Authorization Checks in Wertheim SafeController Software ... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-34024 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4

    Post summary

    The snippet announces CVE-2026-34024, noting missing authorization checks in Wertheim SafeController software, with no PoC, exploit, or patch details included.

    0000034
    4.0K followersView on X

Explore more

Back to dashboard