Buffer Overflow Vulnerability in Tobit Laboratories AG TeamDavid's Webbox Application
CVE-2026-54210

9.5CRITICAL

Key Information:

Vendor

Tobit Laboratories Ag

Status
Teamdavid
Vendor
CVE Published:
7 August 2026

What is CVE-2026-54210?

Tobit Laboratories AG's TeamDavid's Webbox application has a vulnerability in its file upload functionality that allows an unauthorized attacker to exploit a buffer overflow by providing an excessively long filename. This can lead to a server crash, creating a denial of service. In some scenarios, if a stack canary is revealed or manipulated, the vulnerability could be leveraged for remote code execution, potentially allowing full server compromise. This issue is present in TeamDavid through Rollout 524.

Affected Version(s)

TeamDavid 0

References

https://david.tobit.software/releasenotes
release-notes
https://labs.infoguard.ch/posts/22-cves-in-david-a-secure...
third-party-advisory

CVSS V4

Score:
9.5
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Lucas Dodgson of InfoGuard Labs
.