VYPR

Webbox

by Tobit Laboratories AG

CVEs (2)

  • CVE-2026-54200HigAug 7, 2026
    risk 0.55cvss —epss 0.00

    Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a local file inclusion vulnerability in the send email, fax, SMS, etc. functionality. By specifying an '@@attach' command in the form field 'scjob', files can be attached to a message, which can then be downloaded by…

  • CVE-2026-12071MedAug 7, 2026
    risk 0.34cvss —epss 0.00

    The Webbox of TeamDavid by Tobit Laboratories AG constructs redirect URLs using user-supplied input, which is appended to the redirect target in a 302 HTTP response. By using URL-encoded characters such as “%2e” (representing a dot), an attacker can manipulate the…