CVE-2026-54212: TeamDavid: Buffer Overflow in JSON-parsing
Tobit Laboratories AG TeamDavid's Webbox application implements an API endpoint that is vulnerable to a buffer overflow condition. By submitting a specially crafted JSON body, such as one that is at least 8 characters long and begins with a number, an unauthenticated attacker can cause the server to crash, resulting in denial of service. Depending on the stack state or if a stack canary can be disclosed through another vulnerability, this buffer overflow could potentially lead to remote code execution and full compromise of the server. This issue affects TeamDavid through Rollout 524.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-54212?
CVE-2026-54212 has a risk score of 76, indicating a high severity vulnerability.
How can I mitigate CVE-2026-54212?
To mitigate CVE-2026-54212, it is recommended to update the TeamDavid Webbox application to the latest version that addresses this buffer overflow vulnerability.
What causes the vulnerability in CVE-2026-54212?
CVE-2026-54212 is caused by a buffer overflow condition in the JSON-parsing implemented in the TeamDavid Webbox API.
Who is affected by CVE-2026-54212?
Any users or organizations utilizing the TeamDavid Webbox application with the vulnerable API endpoint are affected by CVE-2026-54212.
Can CVE-2026-54212 be exploited remotely?
Yes, CVE-2026-54212 can be exploited remotely by an unauthenticated attacker through a specially crafted JSON body.