CVE-2026-54209

Περιγραφή

Tobit Laboratories AG TeamDavid-s Webbox application handles password changes using a function triggered by including the string -(editini)- in the file path, writing the new password to the specified -Archive.ini- file. However, the application does not verify that the provided path actually refers to an -Archive.ini- file. If an attacker specifies a different file with excessive size, a buffer overflow occurs. This vulnerability allows an unauthenticated attacker to crash the server, resulting in denial of service. This issue affects TeamDavid through Rollout 524.