Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.5
CVE-2026-54211: TeamDavid: Server Crash from Excessively Long Form Data
CVE-2026-54211 · published 28 days ago
Summary
The TeamDavid Webbox application is vulnerable to a server crash when it receives excessively long form data. This could be exploited by an attacker to shut down the server. To protect against this, it's recommended to update to a newer version of TeamDavid or apply a patch if available.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| tobit laboratories ag | teamdavid | <= Rollout 524 |
Original advisory text
TeamDavid: Buffer Overflow in multiple form data parameters
Tobit Laboratories AG TeamDavid's Webbox application’s endpoint “//serverClient_close.html” is vulnerable to a
buffer overflow vulnerability in multiple form data parameters. By
submitting excessively long values in these parameters, an authenticated
attacker can trigger a server crash, resulting in denial of service.
Depending on the stack state or if a stack canary can be disclosed
through another vulnerability, this buffer overflow could potentially be
exploited for remote code execution, leading to full compromise of the
server. This issue affects TeamDavid through Rollout 524.
buffer overflow vulnerability in multiple form data parameters. By
submitting excessively long values in these parameters, an authenticated
attacker can trigger a server crash, resulting in denial of service.
Depending on the stack state or if a stack canary can be disclosed
through another vulnerability, this buffer overflow could potentially be
exploited for remote code execution, leading to full compromise of the
server. This issue affects TeamDavid through Rollout 524.
Severity
9.5
Critical
CVSS 4.0: 9.5 (NVD)
Exploitation
EPSS <1%
Type
CWE-787Out-of-bounds Write
Timeline
Published7 Aug 2026
Updated3 Sep 2026
First seen7 Aug 2026
Monitor software like this
Free during beta