SSRF in Tobit Laboratories Ag Teamdavid
CVE-2026-54207
Tobit Laboratories AG TeamDavid's Webbox 's move archive functionality (“!ArcEntryMove”) accepts an arbitrary path, which can be set to network locations using UNC paths (e.g., “\\Server\Share”). The server processes these paths without…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
Affected products
- Tobit Laboratories Ag Teamdavid — versions 0
Weakness classification (CWE)
References
- vulnerability@ncsc.ch (release-notes)
- vulnerability@ncsc.ch (third-party-advisory)