What is GHSA-8rv5-p2xx-4q2w?

GHSA-8rv5-p2xx-4q2w is a security advisory published by GitHub Security Advisories with High severity. Tobit Laboratories AG TeamDavid's Webbox is vulnerable to an arbitrary file deletion ...

Which CVE IDs does GHSA-8rv5-p2xx-4q2w cover?

GHSA-8rv5-p2xx-4q2w covers the following CVE IDs: CVE-2026-12070. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-8rv5-p2xx-4q2wHigh

Tobit Laboratories AG TeamDavid's Webbox is vulnerable to an arbitrary file deletion ...

Vendor

GitHub Security Advisories

Published

August 7, 2026

Last Modified

August 7, 2026

🔗 CVE IDs covered (1)

CVE-2026-12070 →

📋 Description

Tobit Laboratories AG TeamDavid's Webbox is vulnerable to an arbitrary file deletion vulnerability in the send email, fax, SMS, etc. functionality. By specifying an @@COMMENTFILE command in the form field scjob, any file on the system can be deleted. This issue affects TeamDavid through Rollout 524.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-12070
https://david.tobit.software/releasenotes
https://labs.infoguard.ch/posts/22-cves-in-david-a-secure-m365-alternative
https://github.com/advisories/GHSA-8rv5-p2xx-4q2w