AUGUST 16, 2026
Live Feed
Back to database
Case File

CVE-2026-12070

HIGH · CVSS 8.4 EPSS 0.24%

Source: NVD + CISA KEV + EPSS · Published 2026-08-07 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

Tobit Laboratories AG TeamDavid's Webbox is susceptible to an arbitrary file deletion vulnerability within its email, fax, and SMS functionalities, allowing attackers to delete any file on the system by exploiting the @@COMMENTFILE command in the scjob form field. This high-severity flaw poses significant risks to data integrity and system stability. Organizations using TeamDavid versions up to Rollout 524 should prioritize immediate remediation to mitigate potential data loss and unauthorized access.

CVE
CVE-2026-12070
Severity
HIGH
CVSS
8.4
EPSS
0.24%

Original NVD Description

Tobit Laboratories AG TeamDavid's Webbox is vulnerable to an arbitrary file deletion vulnerability in the send email, fax, SMS, etc. functionality. By specifying an @@COMMENTFILE command in the form field scjob, any file on the system can be deleted. This issue affects TeamDavid through Rollout 524.