Open Redirect in Tobit Laboratories Ag Teamdavid
CVE-2026-54214
Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to HTTP header injection through the “cType” URL parameter, which allows arbitrary modification of the Content-Type header in HTTP responses. Because the parameter does n…
Vulnerability class: Open Redirect
Affected products
- Tobit Laboratories Ag Teamdavid — versions 0
Weakness classification (CWE)
References
- vulnerability@ncsc.ch (release-notes)
- vulnerability@ncsc.ch (third-party-advisory)