CVE-2026-54210: TeamDavid: Buffer Overflow in file names of file upload functionalities
Tobit Laboratories AG TeamDavid's Webbox application implements various file upload functionalities that are vulnerable to a buffer overflow condition. By specifying an excessively long filename in a file upload request, an unauthenticated attacker can trigger a crash of the server, resulting in a denial of service. Depending on the stack state or if a stack canary can be disclosed through another vulnerability, this buffer overflow could potentially be exploited for remote code execution, leading to full compromise of the server. This issue affects TeamDavid through Rollout 524.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-54210?
CVE-2026-54210 has a risk score of 73, indicating a high severity level.
How do I fix CVE-2026-54210?
To fix CVE-2026-54210, update the TeamDavid Webbox application to the latest version that addresses this buffer overflow vulnerability.
What type of vulnerability is CVE-2026-54210?
CVE-2026-54210 is classified as a buffer overflow vulnerability associated with file upload functionalities.
Who is affected by CVE-2026-54210?
Users of the TeamDavid Webbox application who utilize its file upload functionalities are affected by CVE-2026-54210.
What can an attacker do with CVE-2026-54210?
An unauthenticated attacker can exploit CVE-2026-54210 by uploading files with excessively long filenames, potentially causing a server crash.