CVE-2026-54213

Name of the Vulnerable Software and Affected Versions TeamDavid versions prior to Rollout 525

Description The Webbox application exposes a functionality that allows the server to be shut down when the '/internalRestart' endpoint is accessed. This endpoint is accessible to unauthenticated users over the public Internet. Instead of performing a restart, the server shuts down completely, allowing a remote attacker to trigger a persistent denial of service. Recovery from this state requires manual administrator intervention to restart the service.

Recommendations Update TeamDavid to a version later than Rollout 524. Restrict access to the '/internalRestart' endpoint to prevent unauthorized access.