Tobit Laboratories AG vulnerabilities
22 CVEs tracked
Tobit Laboratories AG appears in recent reporting with a cluster of critical vulnerabilities in its TeamDavid's Webbox product. The main themes revolve around missing authentication and authorization (CVE-2026-54201), exposure of sensitive information via a memory leak (CVE-2026-54203), and path traversal in file operations (CVE-2026-54202). Defenders should prioritize patching for the local file inclusion (CVE-2026-54200), arbitrary file deletion (CVE-2026-12070), and hard-coded cryptographic key issues, while also monitoring for potential data exposure through the memory leak in CVE-2026-54203.
Azərbaycanca: Tobit Laboratories AG, son hesabatlarda TeamDavid's Webbox məhsulunda ciddi zəifliklərlə bağlı diqqət mərkəzindədir. Hesabatlar əsasən autentifikasiya və avtorizasiya çatışmazlığı (CVE-2026-54201), həssas məlumatların sızması (CVE-2026-54203) və fayl əməliyyatlarında yol keçidi (CVE-2026-54202) kimi müxtəlif kritik zəiflikləri əhatə edir. Müdafiəçilər xüsusilə CVE-2026-54200 (lokal fayl daxiletmə) və CVE-2026-12070 (ixtiyari fayl silinməsi) kimi zəifliklərə, eləcə də CVE-2026-54203 yaddaş sızması vasitəsilə mümkün məlumat ifşasına diqqət yetirməlidir.
This vendor's CVEs22
- CVE-2026-54218EPSS 0.27%
- CVE-2026-54217EPSS 0.26%
- CVE-2026-54216EPSS 0.28%
- CVE-2026-54215EPSS 0.27%
- CVE-2026-54214EPSS 0.34%
- CVE-2026-54213EPSS 0.45%
- CVE-2026-54212EPSS 0.47%
- CVE-2026-54211EPSS 0.41%
- CVE-2026-54210EPSS 0.47%
- CVE-2026-54209EPSS 0.29%
- CVE-2026-54208EPSS 0.38%
- CVE-2026-54207EPSS 0.28%
- CVE-2026-54206EPSS 0.28%
- CVE-2026-54205EPSS 0.28%
- CVE-2026-54204EPSS 0.33%
- CVE-2026-54203EPSS 0.32%
- CVE-2026-54202EPSS 0.30%
- CVE-2026-54201EPSS 0.32%
- CVE-2026-54200EPSS 0.24%
- CVE-2026-54199EPSS 0.26%
- CVE-2026-12071EPSS 0.34%
- CVE-2026-12070EPSS 0.24%
This hub is built from skopnix's own reporting on Tobit Laboratories AG: the overview is AI-written from that coverage and every CVE links to its grounded explainer. KEV status comes from CISA's Known Exploited Vulnerabilities catalog and EPSS from FIRST — vendor, version and score details are never invented.