SSRF in Tobit Laboratories Ag Teamdavid
CVE-2026-54205
Tobit Laboratories AG TeamDavid's Webbox 's link storing functionality (//ServerClient_celink.htm) accepts a “pathname” parameter, which can be set to network locations using UNC paths (e.g., “\\Server\Share”). The server processes these…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
Affected products
- Tobit Laboratories Ag Teamdavid — versions 0
Weakness classification (CWE)
References
- vulnerability@ncsc.ch (release-notes)
- vulnerability@ncsc.ch (third-party-advisory)