Open Redirect Vulnerability in Tobit Laboratories AG TeamDavid's Webbox
CVE-2026-54215

5.3MEDIUM

Key Information:

Vendor

Tobit Laboratories Ag

Status
Teamdavid
Vendor
CVE Published:
7 August 2026

What is CVE-2026-54215?

The Tobit Laboratories AG TeamDavid's Webbox contains an open redirect vulnerability that can be exploited through the 'replyUrl' parameter. This flaw allows attackers to create a malicious URL leading users to an untrusted third-party site. Such a technique can be manipulated for phishing attacks, misleading users into clicking on links that appear to come from a legitimate domain but actually direct them to harmful websites. It is crucial for users and administrators to be aware of this vulnerability to mitigate potential risks.

Affected Version(s)

TeamDavid 0

References

https://david.tobit.software/releasenotes
release-notes
https://labs.infoguard.ch/posts/22-cves-in-david-a-secure...
third-party-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dario Weiss of InfoGuard Labs
.