CVE-2026-10069: Resource Consumption in Shibby Tomato
A vulnerability has been found in Shibby Tomato 1.28. The impacted element is an unknown function of the file usr/sbin/miniupnpd. Such manipulation leads to resource consumption. The attack may be launched remotely. This project is superseded by FreshTomato. This vulnerability only affects products that are no longer supported by the maintainer.
AI Analysis
Technical Summary
This vulnerability affects Shibby Tomato 1.28, specifically an unknown function within the miniupnpd binary (usr/sbin/miniupnpd). Exploitation leads to resource consumption, potentially impacting system availability. The attack vector is remote and requires no privileges or user interaction. The project is deprecated and replaced by FreshTomato, and no official remediation or patch is provided for this version.
Potential Impact
Successful exploitation can cause excessive resource consumption on affected devices running Shibby Tomato 1.28, potentially leading to degraded performance or denial of service. Since the product is no longer supported, no official fixes are available, increasing risk for users who continue to operate this version.
Mitigation Recommendations
No official patch or remediation is available for this vulnerability as the affected product is no longer supported. Users are strongly advised to upgrade to the maintained FreshTomato firmware or another supported alternative to mitigate this risk.
CVE-2026-10069: Resource Consumption in Shibby Tomato
Description
A vulnerability has been found in Shibby Tomato 1.28. The impacted element is an unknown function of the file usr/sbin/miniupnpd. Such manipulation leads to resource consumption. The attack may be launched remotely. This project is superseded by FreshTomato. This vulnerability only affects products that are no longer supported by the maintainer.
CVSS v4.0
Score 8.7high
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability affects Shibby Tomato 1.28, specifically an unknown function within the miniupnpd binary (usr/sbin/miniupnpd). Exploitation leads to resource consumption, potentially impacting system availability. The attack vector is remote and requires no privileges or user interaction. The project is deprecated and replaced by FreshTomato, and no official remediation or patch is provided for this version.
Potential Impact
Successful exploitation can cause excessive resource consumption on affected devices running Shibby Tomato 1.28, potentially leading to degraded performance or denial of service. Since the product is no longer supported, no official fixes are available, increasing risk for users who continue to operate this version.
Mitigation Recommendations
No official patch or remediation is available for this vulnerability as the affected product is no longer supported. Users are strongly advised to upgrade to the maintained FreshTomato firmware or another supported alternative to mitigate this risk.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-05-29T08:32:38.317Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a19bc63e29bf47b50f702d2
Added to database: 05/29/2026, 16:18:43 UTC
Last enriched: 06/05/2026, 20:52:14 UTC
Last updated: 07/31/2026, 19:22:57 UTC
Views: 55
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.