Improper input validation in Tobit Laboratories Ag Teamdavid
CVE-2026-54199
Tobit Laboratories AG TeamDavid's Webbox is vulnerable to HTTP header injection through the request body in the application's link storing functionality (//ServerClient_celink.htm), which is appended to the redirect target in the 302 H…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
Affected products
- Tobit Laboratories Ag Teamdavid — versions 0
Weakness classification (CWE)
References
- vulnerability@ncsc.ch (release-notes)
- vulnerability@ncsc.ch (third-party-advisory)