CVE-2026-34027Disclosure

LOWCVSS 5.3 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains insufficient server-side file type validation in the /safe/contract/uploadcustomdocuments endpoint. The application validates uploaded files based on the user-controlled HTTP Content-Type value and accepts the upload if this value contains an allowed string such as pdf, jpeg, tiff, or png. An authenticated attacker with any role or permission level can spoof the Content-Type value and upload arbitrary file content.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-434

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

3 mentions across 1 observed day

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets3 URLs

By indicator

Full discourse3 posts

Infoflowcloud@infoflowcloud139d
Disclosure
🚨*CVE* CVE-2026-34027 The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains insufficient server-side file type validation in the /safe/contract/uploadcustomdocume… https://www.cve.org/CVERecord?id=CVE-2026-34027 ----- Traducción: CVE-2026-34027 El … http://infoflow.cloud`
Post summary
The post announces CVE-2026-34027, detailing a file type validation flaw in Wertheim SafeController software, but provides no PoC, exploit, or patch information.
0000016
79 followersView on X
CVE@CVEnew139d
Disclosure
CVE-2026-34027 The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains insufficient server-side file type validation in the /safe/contract/uploadcustomdocume… https://www.cve.org/CVERecord?id=CVE-2026-34027
Post summary
The post discloses CVE-2026-34027, noting insufficient file type validation on a specific endpoint, but offers no PoC, exploit code, active exploitation evidence, or patch information.
00000157
57.6K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds139d
Disclosure
CVE-2026-34027 Arbitrary File Upload in Wertheim SafeController Software 6.15.8328.28014 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-34027
Post summary
The post announces CVE‑2026‑34027, noting an arbitrary file upload flaw in Wertheim SafeController Software 6.15.8328.28014, without mentioning any PoC, exploitation evidence, patches, or mitigation steps.
0000030
4.0K followersView on X

Explore more

Back to dashboard