HIGH 8.8 NVD
CVE-2026-54218
Use of hard-coded cryptographic key vulnerability in Tobit Laboratories AG TeamDavid's Webbox. For users created locally in David, passwords are stored in vario
Use of hard-coded cryptographic key vulnerability in Tobit Laboratories AG TeamDavid's Webbox. For users created locally in David, passwords are stored in various
files using only obfuscation. Any user with access to the server’s file
system, or who can otherwise extract files from the server (see
vulnerability “Random File Read”), can potentially obtain affected
users’ passwords. This issue affects TeamDavid through Rollout 524.
References
- https://david.tobit.software/releasenotes
- https://labs.infoguard.ch/posts/22-cves-in-david-a-secure-m365-alternative/
- https://labs.infoguard.ch/posts/22-cves-in-david-a-secure-m365-alternative/
This high severity vulnerability with a CVSS score of 8.8 was published on 2026-08-07 via NVD.
vulnfeed aggregates 8893 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.