CVE-2026-34022 describes a cryptographic weakness in the Wertheim SafeController Family 65000 microcontroller used in safe deposit locker systems. The product employs weak custom cryptographic algorithms with hard-coded keys, violating secure key management principles (CWE-321). An adversary in a network position between communicating parties can decrypt messages by breaking the encryption routine or by analyzing enough intercepted messages to recover the hard-coded key. This compromises the confidentiality of communications within the vault room controller system. No vendor advisory or patch information is currently available.

The vulnerability allows an attacker to decrypt sensitive communication data between components of the vault room safe deposit locker system. This undermines the confidentiality and security of the system's communication, potentially exposing operational data or control commands. Since the encryption keys are hard-coded and weak, the attacker does not require privileged access or user interaction to exploit this issue. The impact is rated high due to the critical nature of the protected environment (vault rooms) and the ability to decrypt communications.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider additional compensating controls such as isolating the affected communication channels and monitoring for suspicious interception attempts. Avoid relying solely on the device's built-in cryptography for sensitive communications.