CVE-2026-54209

UNKNOWN 0.0

TeamDavid: Buffer Overflow in 'editini' function

CVSS Score

0.0

EPSS Score

0.4%

EPSS Percentile

34th

Tobit Laboratories AG TeamDavid's Webbox application handles password changes using a function triggered by including the string "(editini)" in the file path, writing the new password to the specified "Archive.ini" file. However, the application does not verify that the provided path actually refers to an "Archive.ini" file. If an attacker specifies a different file with excessive size, a buffer overflow occurs. This vulnerability allows an unauthenticated attacker to crash the server, resulting in denial of service. This issue affects TeamDavid through Rollout 524.

CWE	CWE-125
Vendor	tobit laboratories ag
Product	teamdavid
Published	Aug 7, 2026
Last Updated	Aug 7, 2026

Stay Ahead of the Next One

Get instant alerts for tobit laboratories ag teamdavid

Be the first to know when new unknown vulnerabilities affecting tobit laboratories ag teamdavid are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Tobit Laboratories AG / TeamDavid

0 ≤ Rollout 524

References

NVD ↗ CVE.org ↗ EPSS Data ↗

david.tobit.software: https://david.tobit.software/releasenotes labs.infoguard.ch: https://labs.infoguard.ch/posts/22-cves-in-david-a-secure-m365-alternative/

Credits

Dario Weiss of InfoGuard Labs