EUVD-2026-54431

Tobit Laboratories AG TeamDavid's Webbox is vulnerable to HTTP header injection through the request body in the application's link storing functionality //ServerClientcelink.htm, which is appended to the redirect target in the 302 HTTP response. If a line feed is added, this will also be added to...

EUVD-2026-54424

Tobit Laboratories AG TeamDavid's Webbox is vulnerable to an arbitrary file deletion vulnerability in the send email, fax, SMS, etc. functionality. By specifying an @@COMMENTFILE command in the form field scjob, any file on the system can be deleted. This issue affects TeamDavid through Rollout 5...

CVE-2026-12070

Affected software : Tobit Laboratories AG TeamDavid’s Webbox. Vulnerability : Arbitrary file deletion via an @@COMMENTFILE command in the form field scjob, enabling deletion of any file on the system. Impact : According to the CVE entry, this affects TeamDavid through Rollout 524, with high impac...