CVE-2026-54203: TeamDavid: Memory Leak leaking sensitive information
Memory Leak to an Unauthorized Actor vulnerability in Tobit Laboratories AG TeamDavid's Webbox allows reading of sensitive information. When accessing the URL “/.well-known/mta-sts.”, the application responds with memory. By repeatedly requesting this endpoint, an attacker can access sensitive information, including user passwords. Exploitation does not require authentication. This issue affects TeamDavid through Rollout 524.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-54203?
CVE-2026-54203 has a risk rating of 80, indicating a high severity level.
How do I fix CVE-2026-54203?
To fix CVE-2026-54203, ensure that the application is updated to the latest version provided by Tobit Laboratories AG that addresses this vulnerability.
What kind of information is leaked in CVE-2026-54203?
CVE-2026-54203 leaks sensitive information that can be accessed by unauthorized actors through memory leak.
Which software is affected by CVE-2026-54203?
CVE-2026-54203 affects Tobit Laboratories AG TeamDavid's Webbox.
How does CVE-2026-54203 exploit the application?
CVE-2026-54203 exploits the application by allowing an attacker to repeatedly request the endpoint '/.well-known/mta-sts' to access sensitive information.