Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.2
CVE-2026-54203: TeamDavid: Unauthorized Access to Sensitive User Data
CVE-2026-54203 · published 28 days ago
Summary
The TeamDavid Webbox allows unauthorized access to sensitive user information, including passwords, without needing a login. This can happen when an attacker repeatedly requests a specific URL. Update to a version of TeamDavid after Rollout 524 to fix this issue.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| tobit laboratories ag | teamdavid | <= Rollout 524 |
Original advisory text
TeamDavid: Memory Leak leaking sensitive information
Memory Leak to an Unauthorized Actor vulnerability in Tobit Laboratories AG TeamDavid's Webbox allows reading of sensitive information. When accessing the URL “/.well-known/mta-sts.”, the application responds
with memory. By repeatedly
requesting this endpoint, an attacker can access sensitive
information, including user passwords. Exploitation does not require
authentication. This issue affects TeamDavid through Rollout 524.
with memory. By repeatedly
requesting this endpoint, an attacker can access sensitive
information, including user passwords. Exploitation does not require
authentication. This issue affects TeamDavid through Rollout 524.
Severity
9.2
Critical
CVSS 4.0: 9.2 (NVD)
Exploitation
EPSS <1%
Type
CWE-200Information Exposure
Timeline
Published7 Aug 2026
Updated1 Sep 2026
First seen7 Aug 2026
Monitor software like this
Free during beta