PT-2026-68459
CVE-2026-19034
·
Published
2026-08-06
·
Updated
2026-08-06
Description by
CVSS 2.0
8.3
HighMetricsAV:N/AC:L/Au:M/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Shibby Tomato version 1.28.0000
Description
An OS command injection flaw exists in the
new qoslimit stop() function within the /tmp/qoslimittc stop.sh file. A remote attacker can exploit this by manipulating the wan iface argument to execute arbitrary operating system commands.Recommendations
For version 1.28.0000, migrate to FreshTomato, as the Shibby Tomato project has been superseded by it.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾