CVE-2026-54218

Name of the Vulnerable Software and Affected Versions TeamDavid versions prior to Rollout 525

Description Tobit Laboratories AG TeamDavid's Webbox contains a flaw where a hard-coded cryptographic key is used. Passwords for users created locally in David are stored in multiple files using only obfuscation, which is a method of making data difficult for humans to read but does not provide strong security. An attacker with access to the server file system or the ability to extract files from the server can potentially retrieve these passwords.

Recommendations Update TeamDavid to a version later than Rollout 524.