CVE-2026-54206

Name of the Vulnerable Software and Affected Versions TeamDavid versions prior to Rollout 525

Description The Webbox sending functionality for email, fax, and SMS accepts a @@INCLUDE command that can be configured with network locations using UNC paths. The server processes these paths without validation, leading to outbound connection attempts to SMB servers. This allows attackers to trigger the server to authenticate to arbitrary SMB endpoints, potentially exposing NTLM authentication information, such as NTLM hashes. If outbound connections to port 445 (SMB) are permitted, this can be used for SMB relay or credential theft attacks. Exploitation is possible via the pathname parameter without authentication.

Recommendations Update TeamDavid to a version later than Rollout 524. Restrict outbound connections to port 445 (SMB) to minimize the risk of credential theft.