CVE-2026-54213
Received Received - Intake

Unauthenticated Remote Shutdown in TeamDavid Webbox

Publication date: 2026-08-07

Last updated on: 2026-08-07

Assigner: Switzerland Government Common Vulnerability Program

Description
Tobit Laboratories AG TeamDavid's Webbox application exposes a functionality that allows the server to be shut down when a specific endpoint (/internalRestart) is accessed. This endpoint is accessible to unauthenticated users over the public Internet. Instead of “restarting”, the server shuts completely down. As a result, a remote attacker can trigger a persistent denial of service by shutting down the web server without requiring authentication. Recovery requires manual administrator intervention to restart the service. This issue affects TeamDavid through Rollout 524.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-07
Last Modified
2026-08-07
Generated
2026-08-07
AI Q&A
2026-08-07
EPSS Evaluated
N/A
NVD
CVE-2026-54213
EUVD
EUVD-2026-54444

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
tobit_laboratories_ag teamdavid 524

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-284 The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Tobit Laboratories AG TeamDavid's Webbox application has an unauthenticated endpoint (/internalRestart) that allows remote attackers to shut down the server completely. This causes a persistent denial of service since the server remains offline until manually restarted by an administrator.

Detection Guidance

Check if the /internalRestart endpoint is accessible by sending an HTTP GET or POST request to the server. Use tools like curl or wget to test the endpoint. Example: curl http://<server-address>/internalRestart. If the server shuts down or responds unexpectedly, the vulnerability may be present.

Impact Analysis

This vulnerability allows attackers to disrupt service availability by shutting down the web server remotely without authentication. It can lead to prolonged downtime, loss of access to critical services, and require manual intervention to restore operations.

Compliance Impact

This vulnerability could impact compliance with GDPR and HIPAA by causing service disruptions that violate availability requirements. Downtime may lead to unauthorized access risks or failure to meet data protection obligations requiring timely access to systems.

Mitigation Strategies

Immediately restrict access to the /internalRestart endpoint by blocking it at the firewall or web server level. Update TeamDavid to a version beyond Rollout 524 if available. Monitor network traffic for suspicious requests targeting this endpoint.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-54213. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart