CVE-2026-54202

Name of the Vulnerable Software and Affected Versions TeamDavid versions prior to Rollout 525

Description Tobit Laboratories AG TeamDavid's Webbox contains a path traversal flaw in the archive creation functionality. This occurs because the archive path is user-controlled and lacks sufficient validation, allowing an attacker to manipulate input to traverse directories. Consequently, folders can be created in arbitrary locations, including sensitive system directories like C:Windows or directories belonging to other users.

Recommendations Update TeamDavid to a version later than Rollout 524.