Denial of Service Vulnerability in TeamDavid Application by Tobit Laboratories AG
CVE-2026-54213

9.2CRITICAL

Key Information:

Vendor

Tobit Laboratories Ag

Status
Teamdavid
Vendor
CVE Published:
7 August 2026

What is CVE-2026-54213?

The TeamDavid Webbox application by Tobit Laboratories AG presents a vulnerability that allows unauthenticated users to access an endpoint (/internalRestart) and shut down the server. This enables remote attackers to trigger a persistent denial of service, as the web server can be brought down without authentication. Recovery requires manual intervention from an administrator to restart the service, posing significant risks to availability and operational continuity.

Affected Version(s)

TeamDavid 0

References

https://david.tobit.software/releasenotes
release-notes
https://labs.infoguard.ch/posts/22-cves-in-david-a-secure...
third-party-advisory

CVSS V4

Score:
9.2
Severity:
CRITICAL
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dario Weiss of InfoGuard Labs
.