CVE-2026-54213Disclosure

LOWCVSS 9.2 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Tobit Laboratories AG TeamDavid's Webbox application exposes a functionality that allows the server to be shut down when a specific endpoint (/internalRestart) is accessed. This endpoint is accessible to unauthenticated users over the public Internet. Instead of “restarting”, the server shuts completely down. As a result, a remote attacker can trigger a persistent denial of service by shutting down the web server without requiring authentication. Recovery requires manual administrator intervention to restart the service. This issue affects TeamDavid before Rollout 528. Starting with Rollout 528 (June 30, 2026), the affected functionality is disabled by default and the vulnerabilities are therefore no longer exposed through this functionality.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-284

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud46d
Disclosure
🚨*CVE* CVE-2026-54213 Tobit Laboratories AG TeamDavid's Webbox application exposes a functionality that allows the server to be shut down when a specific endpoint (/internalRestart) is ac… https://www.cve.org/CVERecord?id=CVE-2026-54213 ----- Traducción: CVE-2026-54213 Tob… http://infoflow.cloud`
Post summary
The post announces CVE-2026-54213 in Tobit Laboratories AG TeamDavid's Webbox, noting that an exposed /internalRestart endpoint allows the server to be shut down, without providing PoC, exploit code, or patch information.
0000034
98 followersView on X
CVE@CVEnew46d
Disclosure
CVE-2026-54213 Tobit Laboratories AG TeamDavid's Webbox application exposes a functionality that allows the server to be shut down when a specific endpoint (/internalRestart) is ac… https://www.cve.org/CVERecord?id=CVE-2026-54213
Post summary
The post announces CVE‑2026‑54213, noting that a Webbox server can be shut down via the /internalRestart endpoint; no PoC, exploit, or patch details are supplied.
00000831
57.9K followersView on X

Explore more

Back to dashboard