Vulnerabilities CVE-2026-12070

CVE-2026-12070

High

Open

TLP:CLEAR

TeamDavid: Arbitrary File Deletion via form field 'scjob'

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Tobit Laboratories AG TeamDavid's Webbox is vulnerable to an arbitrary file deletion vulnerability in the send email, fax, SMS, etc. functionality. By specifying an @@COMMENTFILE command in the form field scjob, any file on the system can be deleted. This issue affects TeamDavid through Rollout 524.

Details

CVSS Score: 8.4
EPSS Score ⓘ: 0.24%

14.5th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:L/SA:H
Confidence: 90%
Published: Aug 7, 2026
Last Modified: Aug 10, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.