CVE-2026-54201

Description

Tobit Laboratories AG TeamDavid's Webbox does not enforce authentication or authorization checks when serving these log files. As a result, attackers can obtain sensitive error information or internal application details, potentially aiding in further attacks. This issue affects TeamDavid through Rollout 524.

References

• https://david.tobit.software/releasenotes
• https://labs.infoguard.ch/posts/22-cves-in-david-a-secure-m365-alternative/