CVE-2026-54199

Name of the Vulnerable Software and Affected Versions TeamDavid versions prior to Rollout 525

Description Tobit Laboratories AG TeamDavid's Webbox contains a flaw in its link storing functionality at the endpoint '//ServerClient celink.htm'. The application fails to properly sanitize the request body, which is subsequently appended to the redirect target in the 302 HTTP response. By inserting a line feed, an attacker can manipulate the response headers, leading to HTTP header injection.

Recommendations Update TeamDavid to a version later than Rollout 524.