CVE-2026-54200

Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a local file inclusion vulnerability in the send email, fax, SMS, etc. functionality. By specifying an '@@attach' command in the form field 'scjob', files can be attached to a message, which can then be downloaded by an authenticated user. A filter is in place that restricts access to the David con-fig folder and the user folder. However, this filter can be bypassed by specifying an alternate data stream, allowing the download of sensitive files such as other users' access files containing their passwords or the server's private key. This issue affects TeamDavid through Rollout 524.

• CWE-73

• https://david.tobit.software/releasenotes
• https://labs.infoguard.ch/posts/22-cves-in-david-a-secure-m365-alternative/

Published

Aug 7, 2026

Last Modified

Aug 10, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-54195Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder…7.1
• CVE-2026-54196Subscriber Privilege Escalation in JetFormBuilder <= 3.6.1 v…6.8
• CVE-2026-54197Unauthenticated Sensitive Data Exposure in GetGenie <= 4.4.1…6.5
• CVE-2026-54198Unauthenticated Cross Site Scripting (XSS) in Media LIbrary …7.1
• CVE-2026-54199Tobit Laboratories AG TeamDavid's Webbox is vulnerable to H…5.3
• CVE-2026-5420A security flaw has been discovered in Shinrays Games Goods …2.5
• CVE-2026-54201Tobit Laboratories AG TeamDavid's Webbox does not enforce a…6.9
• CVE-2026-54202Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a…8.5
• CVE-2026-54203Memory Leak to an Unauthorized Actor vulnerability in Tobit …9.2
• CVE-2026-54204Tobit Laboratories AG TeamDavid's Webbox 's search functiona…7.7
• CVE-2026-54205Tobit Laboratories AG TeamDavid's Webbox 's link storing fun…6.3
• CVE-2026-54206Tobit Laboratories AG TeamDavid's Webbox 's sending email, f…6.3