Is CVE-2026-54217 being exploited?

No public exploit is currently tracked.

Back

CVE-2026-54217

Description

Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to a stored XSS vulnerability. An attacker can send an email containing malicious JavaScript code. When a user accesses the email, the stored cross-site scripting is triggered. This issue affects TeamDavid through Rollout 524.