CVE-2026-54202: TeamDavid: Path Traversal in the archive creation functionality

Q: What is the severity of CVE-2026-54202?

CVE-2026-54202 has a risk rating of 48, indicating it is a moderate vulnerability.

Q: How do I fix CVE-2026-54202?

To fix CVE-2026-54202, ensure proper validation and sanitization of user inputs in the archive creation functionality.

Q: What software is affected by CVE-2026-54202?

CVE-2026-54202 affects TeamDavid's Webbox.

Q: What type of vulnerability is CVE-2026-54202?

CVE-2026-54202 is a path traversal vulnerability.

Q: When was CVE-2026-54202 published?

CVE-2026-54202 was published on August 7, 2026.

Published Aug 7, 2026

Updated

Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a path traversal vulnerability in the archive creation functionality. Because the archive path is user-controlled and insufficiently validated, an attacker can manipulate the input to traverse directories. This allows the creation of folders in arbitrary locations, including sensitive directories such as C:\Windows or for different users. This issue affects TeamDavid through Rollout 524.

Affected Software

1 affected component

TeamDavid's Webbox<Rollout 524

Event History

Aug 7, 2026

CVE Published

via MITRE·09:43 AM

Data Sourced

via MITRE·09:43 AM

DescriptionWeakness

Data Sourced

via NVD·10:16 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-54202?

CVE-2026-54202 has a risk rating of 48, indicating it is a moderate vulnerability.

How do I fix CVE-2026-54202?

To fix CVE-2026-54202, ensure proper validation and sanitization of user inputs in the archive creation functionality.

What software is affected by CVE-2026-54202?

CVE-2026-54202 affects TeamDavid's Webbox.

What type of vulnerability is CVE-2026-54202?

CVE-2026-54202 is a path traversal vulnerability.

When was CVE-2026-54202 published?