CVE-2026-54203 Tobit Laboratories AG CVE debrief

Who should care

Organizations using Tobit Laboratories AG TeamDavid's Webbox, especially those with sensitive information stored in the system, should prioritize patching this vulnerability to prevent unauthorized access.

Technical summary

The CVE-2026-54203 vulnerability in Tobit Laboratories AG TeamDavid's Webbox allows an attacker to access sensitive information, including user passwords, by repeatedly requesting the /.well-known/mta-sts endpoint. Exploitation does not require authentication. The issue affects TeamDavid through Rollout 524. The vulnerability has a CVSS score of 9.2 and is classified as CRITICAL. To address this vulnerability, it is essential to apply vendor-provided patches or updates. Restricting access to the /.well-known/mta-sts endpoint and implementing additional monitoring can help prevent unauthorized information disclosure.

Defensive priority

Critical vulnerability in Tobit Laboratories AG TeamDavid's Webbox, allowing unauthorized access to sensitive information, including user passwords.

Recommended defensive actions

• Inventory and verify Tobit Laboratories AG TeamDavid's Webbox installations to identify potential exposure.
• Restrict access to the /.well-known/mta-sts endpoint to prevent unauthorized information disclosure.
• Implement additional monitoring to detect potential exploitation attempts.
• Apply vendor-provided patches or updates to address the vulnerability.
• Review and update security configurations to ensure proper protection.

Evidence notes

The CVE-2026-54203 vulnerability in Tobit Laboratories AG TeamDavid's Webbox allows an attacker to access sensitive information, including user passwords, by repeatedly requesting the /.well-known/mta-sts endpoint. Exploitation does not require authentication. The issue affects TeamDavid through Rollout 524. Further analysis is needed to determine the full scope of affected systems and potential mitigations.

Official resources