CVE-2026-54200: CWE-73 External Control of File Name or Path in Tobit Laboratories AG TeamDavid
Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a local file inclusion vulnerability in the send email, fax, SMS, etc. functionality. By specifying an '@@attach' command in the form field 'scjob', files can be attached to a message, which can then be downloaded by an authenticated user. A filter is in place that restricts access to the David con-fig folder and the user folder. However, this filter can be bypassed by specifying an alternate data stream, allowing the download of sensitive files such as other users' access files containing their passwords or the server's private key. This issue affects TeamDavid through Rollout 524.
AI Analysis
Technical Summary
CVE-2026-54200 describes a local file inclusion vulnerability in Tobit Laboratories AG TeamDavid's Webbox component. The flaw exists in the send email, fax, SMS, and similar functionalities, where the '@@attach' command in the 'scjob' form field allows attaching arbitrary files to messages. Despite filters blocking access to critical folders like the David config and user folders, attackers can bypass these restrictions by specifying alternate data streams. This bypass permits downloading sensitive files including other users' access credentials and the server's private key. The vulnerability affects versions of TeamDavid up to Rollout 524. No official remediation or patch has been disclosed yet.
Potential Impact
An authenticated local attacker can exploit this vulnerability to download sensitive files from the server, including other users' password files and the server's private key. This could lead to credential compromise and further unauthorized access or data breaches. The vulnerability has a high CVSS 4.0 score of 8.4, indicating significant impact on confidentiality and partial impact on integrity and availability.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local authenticated access to trusted users only and monitor for suspicious activity related to file attachments in the 'scjob' form field. Avoid exposing the affected functionality to untrusted users.
CVE-2026-54200: CWE-73 External Control of File Name or Path in Tobit Laboratories AG TeamDavid
Description
Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a local file inclusion vulnerability in the send email, fax, SMS, etc. functionality. By specifying an '@@attach' command in the form field 'scjob', files can be attached to a message, which can then be downloaded by an authenticated user. A filter is in place that restricts access to the David con-fig folder and the user folder. However, this filter can be bypassed by specifying an alternate data stream, allowing the download of sensitive files such as other users' access files containing their passwords or the server's private key. This issue affects TeamDavid through Rollout 524.
CVSS v4.0
Score 8.4high
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-54200 describes a local file inclusion vulnerability in Tobit Laboratories AG TeamDavid's Webbox component. The flaw exists in the send email, fax, SMS, and similar functionalities, where the '@@attach' command in the 'scjob' form field allows attaching arbitrary files to messages. Despite filters blocking access to critical folders like the David config and user folders, attackers can bypass these restrictions by specifying alternate data streams. This bypass permits downloading sensitive files including other users' access credentials and the server's private key. The vulnerability affects versions of TeamDavid up to Rollout 524. No official remediation or patch has been disclosed yet.
Potential Impact
An authenticated local attacker can exploit this vulnerability to download sensitive files from the server, including other users' password files and the server's private key. This could lead to credential compromise and further unauthorized access or data breaches. The vulnerability has a high CVSS 4.0 score of 8.4, indicating significant impact on confidentiality and partial impact on integrity and availability.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local authenticated access to trusted users only and monitor for suspicious activity related to file attachments in the 'scjob' form field. Avoid exposing the affected functionality to untrusted users.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- NCSC.ch
- Date Reserved
- 2026-06-12T09:32:44.531Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a75af7fbf8831d53921c72a
Added to database: 08/07/2026, 10:12:15 UTC
Last enriched: 08/07/2026, 10:28:23 UTC
Last updated: 08/08/2026, 00:41:14 UTC
Views: 6
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.