CVE-2026-54208

Name of the Vulnerable Software and Affected Versions TeamDavid versions prior to Rollout 525

Description The Webbox application allows an unauthenticated attacker to create or modify files on the server using attacker-controlled content. This occurs because user input is written directly to files without adequate validation or restrictions on file types. An attacker can exploit this to create files, such as .htm files, containing malicious JavaScript, which leads to stored cross-site scripting (XSS) when a user accesses the created file.

Recommendations Update TeamDavid to a version later than Rollout 524.