SSRF in Tobit Laboratories Ag Teamdavid
CVE-2026-54206
Tobit Laboratories AG TeamDavid's Webbox 's sending email, fax, SMS, etc. functionality accepts a @@INCLUDE command, which can be set to network locations using UNC paths (e.g., “\\Server\Share”). The server processes these paths without…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
Affected products
- Tobit Laboratories Ag Teamdavid — versions 0
Weakness classification (CWE)
References
- vulnerability@ncsc.ch (release-notes)
- vulnerability@ncsc.ch (third-party-advisory)