Security Advisory

CVE-2026-54215

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-07 09:48:16

Last updated 2026-08-07 11:25:12

Assigner NCSC.ch

CVSS score not scored

State PUBLISHED

Description

Tobit Laboratories AG TeamDavid's Webbox contains an open redirect vulnerability via the “replyUrl” parameter. An attacker can exploit this vulnerability to craft a URL within the application that, when visited, redirects the user’s browser to an arbitrary third-party site. This can be abused for phishing attacks, where users receive a trusted domain link but are redirected to a phishing website. This issue affects TeamDavid through Rollout 524.

← Browse all CVEs View on cve.org ↗