Memory Leak Vulnerability in Tobit Laboratories AG TeamDavid's Webbox
CVE-2026-54203

9.2CRITICAL

Key Information:

Vendor

Tobit Laboratories Ag

Status
Teamdavid
Vendor
CVE Published:
7 August 2026

What is CVE-2026-54203?

A memory leak vulnerability exists in Tobit Laboratories AG's TeamDavid's Webbox that permits unauthorized individuals to read sensitive information. This issue manifests when an attacker repeatedly accesses the URL '/.well-known/mta-sts', allowing them to extract data such as user passwords without requiring authentication. This vulnerability impacts TeamDavid's Webbox from Rollout 524, posing a significant risk to user data confidentiality.

Affected Version(s)

TeamDavid 0

References

https://david.tobit.software/releasenotes
release-notes
https://labs.infoguard.ch/posts/22-cves-in-david-a-secure...
third-party-advisory

CVSS V4

Score:
9.2
Severity:
CRITICAL
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dario Weiss of InfoGuard Labs
.