PT-2026-68911

CVE-2026-54215

Published

2026-08-07

Updated

2026-08-07

Description by

CVSS 4.0

5.3

Medium

MetricsAV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N

Name of the Vulnerable Software and Affected Versions TeamDavid versions prior to Rollout 525

Description Tobit Laboratories AG TeamDavid's Webbox contains an open redirect issue. An attacker can craft a URL that redirects the user's browser to an arbitrary third-party site via the replyUrl parameter. This can be leveraged for phishing attacks by using a trusted domain link to redirect users to a malicious website.

Recommendations Update to a version later than Rollout 524. Avoid using the replyUrl parameter until the update is applied.

Exploitability

Exploit

Fix

Impacts

Researchers

Dario Weiss

Vendors

Affected products

Weakness enumeration

CWE-601: URL Redirection to Untrusted Site (\'Open Redirect\')

Related identifiers