Vulnerabilities CVE-2026-19036

CVE-2026-19036

High

Open

TLP:CLEAR

Shibby Tomato wanoptions sub_40F88C os command injection

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

A security flaw has been discovered in Shibby Tomato 1.28.0000. This affects the function sub_40F88C of the file /tmp/ppp/wanoptions. The manipulation of the argument ppp_custom results in os command injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. This project is superseded by FreshTomato.

Details

CVSS Score: 8.6
EPSS Score ⓘ: 2.47%

83th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Confidence: 90%
Published: Aug 6, 2026
Last Modified: Aug 6, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.