Security Advisory

CVE-2026-12070

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-07 09:40:02
Last updated 2026-08-07 09:40:02
Assigner NCSC.ch
CVSS score not scored
State PUBLISHED

Description

Tobit Laboratories AG TeamDavid's Webbox is vulnerable to an arbitrary file deletion vulnerability in the send email, fax, SMS, etc. functionality. By specifying an @@COMMENTFILE command in the form field scjob, any file on the system can be deleted. This issue affects TeamDavid through Rollout 524.