Threats tagged 'ghsa-v799-m875-3q84'

CVE-2026-19036 is a high-severity OS command injection vulnerability in Shibby Tomato version 1.28.0000. It affects the function sub_40F88C in the file /tmp/ppp/wanoptions, where manipulation of the ppp_custom argument allows remote attackers to execute arbitrary OS commands. The vulnerability is exploitable remotely, and public exploit code has been released. The Shibby Tomato project has been superseded by FreshTomato. No official patch or remediation guidance is currently documented.