CVE-2026-54217Disclosure

LOWCVSS 5.3 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to a stored XSS vulnerability. An attacker can send an email containing malicious JavaScript code. When a user accesses the email, the stored cross-site scripting is triggered. This issue affects TeamDavid before Rollout 528. Starting with Rollout 528 (June 30, 2026), the affected functionality is disabled by default and the vulnerabilities are therefore no longer exposed through this functionality.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-20

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud46d
Disclosure
🚨*CVE* CVE-2026-54217 Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to a stored XSS vulnerability. An attacker can send an email containing malicious JavaScript code.… https://www.cve.org/CVERecord?id=CVE-2026-54217 ----- Traducción: CVE-2026-54217 Tob… http://infoflow.cloud`
Post summary
The tweet announces CVE-2026-54217, detailing a stored XSS flaw in TeamDavid's Webbox application that allows malicious JavaScript to be injected via email.
0000032
98 followersView on X
CVE@CVEnew46d
Disclosure
CVE-2026-54217 Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to a stored XSS vulnerability. An attacker can send an email containing malicious JavaScript code.… https://www.cve.org/CVERecord?id=CVE-2026-54217
Post summary
The post announces a stored XSS flaw (CVE-2026-54217) in TeamDavid's Webbox, providing a brief technical description but no PoC, exploit code, active exploitation evidence, or patch details.
000001.1K
57.9K followersView on X

Explore more

Back to dashboard