CVE-2026-54209

Name of the Vulnerable Software and Affected Versions TeamDavid versions prior to Rollout 525

Description The Webbox application handles password changes via a function triggered by including the string "(editini)" in the file path to write a new password to the "Archive.ini" file. The application fails to verify if the provided path actually refers to an "Archive.ini" file. An unauthenticated attacker can trigger a buffer overflow—a condition where a program writes more data to a block of memory than it can hold—by specifying a file with an excessive size, leading to a server crash and denial of service.

Recommendations Update TeamDavid to a version later than Rollout 524.