Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Leaderboard
CNA Report Cards
Vendor Directory
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Careers
Contact
Book a demo

Get Started

Sign up
Log in

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in Start free

Home
Vendors
Tobitlaboratories
Teamdavid

Tobit Laboratories AG TeamDavid Vulnerabilities: CVEs, CISA KEV & Security Advisories

Tobit Laboratories AG

22 CVEs

TO

Tobit Laboratories AG TeamDavid Vulnerabilities

CVE security advisories and vulnerability history for TeamDavid by Tobit Laboratories AG.

22

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

8

Public exploits

PoC or exploit code

7.4

Avg CVSS

2026–2026

Last updated August 7, 2026

Overview

Tobit Laboratories AG TeamDavid has 22 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 8 have a known public exploit. The average CVSS base score across scored CVEs is 7.4.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Tobit Laboratories AG TeamDavid, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Tobit Laboratories AG TeamDavid's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical5

High7

Medium10

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Tobit Laboratories AG TeamDavid's CVEs are currently listed in CISA's KEV catalog.

Public exploits

8

8 of Tobit Laboratories AG TeamDavid's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Tobit Laboratories AG TeamDavid version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= Rollout 52422 CVEs

Fixed in

> Rollout 52422 CVEs

Find a version

22 CVEs

Sort

TeamDavid: Server-Side Request Forgery (SSRF) via 'pathname' parameter in link storing functionality
CVE-2026-54205
Public exploit
Patch
CWE-20
Medium · CVSS 6.3
EPSS 0.3% (20th pct)2026-08-07
TeamDavid: Weak Cryptography and Insecure Password Storage
CVE-2026-54218
Public exploit
Patch
CWE-321
High · CVSS 8.8
EPSS 0.3% (19th pct)2026-08-07
TeamDavid: Stored XSS in web application
CVE-2026-54217
Public exploit
Patch
CWE-20
Medium · CVSS 5.3
EPSS 0.3% (17th pct)2026-08-07
TeamDavid: Reflected Cross Site Scripting (XSS) via the 'EntryInfo' parameter
CVE-2026-54216
Public exploit
Patch
CWE-79
Medium · CVSS 5.3
EPSS 0.3% (20th pct)2026-08-07
TeamDavid: Open Redirect via the 'replyUrl' parameter
CVE-2026-54215
Public exploit
Patch
CWE-601
Medium · CVSS 5.3
EPSS 0.3% (19th pct)2026-08-07
TeamDavid: Header Injection through the 'cType' URL parameter
CVE-2026-54214
Public exploit
Patch
CWE-601
Medium · CVSS 5.3
EPSS 0.3% (26th pct)2026-08-07
TeamDavid: Denial of Service via endpoint 'internalRestart'
CVE-2026-54213
Public exploit
Patch
CWE-284
Critical · CVSS 9.2
EPSS 0.4% (37th pct)2026-08-07
TeamDavid: Buffer Overflow in JSON-parsing
CVE-2026-54212
Public exploit
Patch
CWE-787
Critical · CVSS 9.5
EPSS 0.5% (39th pct)2026-08-07
TeamDavid: Buffer Overflow in multiple form data parameters
CVE-2026-54211
Patch
CWE-787
Critical · CVSS 9.5
EPSS 0.4% (34th pct)2026-08-07
TeamDavid: Buffer Overflow in file names of file upload functionalities
CVE-2026-54210
Patch
CWE-787
Critical · CVSS 9.5
EPSS 0.5% (39th pct)2026-08-07
TeamDavid: Buffer Overflow in 'editini' function
CVE-2026-54209
Patch
CWE-125
High · CVSS 8.9
EPSS 0.3% (21th pct)2026-08-07
TeamDavid: Arbitrary File Write leading to Stored XSS
CVE-2026-54208
Patch
CWE-20
High · CVSS 8.5
EPSS 0.4% (31th pct)2026-08-07
TeamDavid: Server-Side Request Forgery (SSRF) via 'pathname' parameter in move archive functionality
CVE-2026-54207
Patch
CWE-20
Medium · CVSS 6.3
EPSS 0.3% (20th pct)2026-08-07
TeamDavid: Server-Side Request Forgery (SSRF) via 'pathname' parameter in sending functionality
CVE-2026-54206
Patch
CWE-20
Medium · CVSS 6.3
EPSS 0.3% (20th pct)2026-08-07
TeamDavid: Server-Side Request Forgery (SSRF) via 'pathnameroot' parameter in search functionality
CVE-2026-54204
Patch
CWE-20
High · CVSS 7.7
EPSS 0.3% (25th pct)2026-08-07
TeamDavid: Memory Leak leaking sensitive information
CVE-2026-54203
Patch
CWE-200
Critical · CVSS 9.2
EPSS 0.3% (24th pct)2026-08-07
TeamDavid: Path Traversal in the archive creation functionality
CVE-2026-54202
Patch
CWE-36
High · CVSS 8.5
EPSS 0.3% (23th pct)2026-08-07
TeamDavid: Missing Authorization
CVE-2026-54201
Patch
CWE-862
Medium · CVSS 6.9
EPSS 0.3% (25th pct)2026-08-07
TeamDavid: Local File Inclusion via the form field 'scjob'
CVE-2026-54200
Patch
CWE-73
High · CVSS 8.4
EPSS 0.2% (15th pct)2026-08-07
TeamDavid: Header Injection through request body in link storing functionality
CVE-2026-54199
Patch
CWE-20
Medium · CVSS 5.3
EPSS 0.3% (18th pct)2026-08-07
TeamDavid: Header Injection leading to Open Redirect via URL-encoded characters
CVE-2026-12071
Patch
CWE-601
Medium · CVSS 5.3
EPSS 0.3% (26th pct)2026-08-07
TeamDavid: Arbitrary File Deletion via form field 'scjob'
CVE-2026-12070
Patch
CWE-73
High · CVSS 8.4
EPSS 0.2% (14th pct)2026-08-07

Common weakness types

The CWE weakness categories most often found in Tobit Laboratories AG TeamDavid CVEs. Follow any weakness for its full explanation.

CWE-20Improper Input Validation7 CVEs
CWE-787Out-of-bounds Write3 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')3 CVEs
CWE-73External Control of File Name or Path2 CVEs
CWE-36Absolute Path Traversal1 CVE
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVE
CWE-125Out-of-bounds Read1 CVE
CWE-862Missing Authorization1 CVE

Other Tobit Laboratories AG products

Browse vulnerabilities for other products by Tobit Laboratories AG.

All Tobit Laboratories AG vulnerabilities

Frequently asked questions

Common questions about Tobit Laboratories AG TeamDavid vulnerabilities.

How many CVEs does Tobit Laboratories AG TeamDavid have?: Tobit Laboratories AG TeamDavid has 22 published CVE records since 2026.
How many Tobit Laboratories AG TeamDavid CVEs are in CISA KEV?: None of Tobit Laboratories AG TeamDavid's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Tobit Laboratories AG TeamDavid vulnerabilities?: Yes — 8 of Tobit Laboratories AG TeamDavid's CVEs have a known public exploit.
Which versions of Tobit Laboratories AG TeamDavid are affected?: 2 distinct Tobit Laboratories AG TeamDavid versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Tobit Laboratories AG TeamDavid CVEs?: Tobit Laboratories AG TeamDavid's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-787 (Out-of-bounds Write), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')), CWE-73 (External Control of File Name or Path).
How many critical Tobit Laboratories AG TeamDavid vulnerabilities are there?: Tobit Laboratories AG TeamDavid has 5 critical and 7 high-severity CVEs.
What is the average severity of Tobit Laboratories AG TeamDavid CVEs?: The average CVSS base score across Tobit Laboratories AG TeamDavid's scored CVEs is 7.4.

References

All Tobit Laboratories AG vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Tobit Laboratories AG TeamDavid vulnerabilities

Monitor new Tobit Laboratories AG TeamDavid vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Other products
FAQ
References