PT-2026-68914
CVE-2026-54218
·
Published
2026-08-07
·
Updated
2026-08-07
Description by
CVSS 4.0
8.8
HighMetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions
TeamDavid versions prior to Rollout 525
Description
Tobit Laboratories AG TeamDavid's Webbox contains a flaw where a hard-coded cryptographic key is used. Passwords for users created locally in David are stored in multiple files using only obfuscation, which is a method of making data difficult for humans to read but does not provide strong security. An attacker with access to the server file system or the ability to extract files from the server can potentially retrieve these passwords.
Recommendations
Update TeamDavid to a version later than Rollout 524.
Found an issue in the description? Have something to add? Feel free to write us 👾