Buffer Overflow Vulnerability in Tobit Laboratories AG's TeamDavid Webbox Application
CVE-2026-54212

9.5CRITICAL

Key Information:

Vendor

Tobit Laboratories Ag

Status
Teamdavid
Vendor
CVE Published:
7 August 2026

What is CVE-2026-54212?

The TeamDavid Webbox application by Tobit Laboratories AG contains a buffer overflow vulnerability through an API endpoint. This security issue arises when an unauthenticated attacker submits a specially crafted JSON request with at least 8 characters, starting with a digit. This exploitation can lead to a server crash, resulting in denial of service and may expose further vulnerabilities that could enable remote code execution, allowing for complete server compromise.

Affected Version(s)

TeamDavid 0

References

https://david.tobit.software/releasenotes
release-notes
https://labs.infoguard.ch/posts/22-cves-in-david-a-secure...
third-party-advisory

CVSS V4

Score:
9.5
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Lucas Dodgson of InfoGuard Labs
.