PT-2026-57658 · Unknown · Shibby Tomato
CVE-2026-15547
·
Published
2026-07-13
·
Updated
2026-07-13
CVSS v2.0
6.5
Medium
| Vector | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Shibby Tomato versions prior to 1.28.0000
Description
A weakness in the CIFS Mount Handler component allows remote attackers to perform OS command injection. This occurs through the manipulation of the
cifs1/cifs2 arguments within the sub 2D048() function.Recommendations
Update to a version newer than 1.28.0000.
As a temporary workaround, restrict access to the CIFS Mount Handler component to minimize the risk of exploitation.
Exploit
Fix
OS Command Injection
Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Shibby Tomato