CVE Feed

    Dashboard / CVE / CVE-2026-10068

    CVE-2026-10068

    A flaw has been found in Shibby Tomato 1.28. The affected element is the function send of the file usr/sbin/miniupnpd of the component SUBSCRIBE Call Handler. This manipulation causes server-side request forgery. The attack may be initiated remotely. This project is superseded by FreshTomato. This vulnerability only affects products that are no longer supported by the maintainer.

    Published:May 29, 2026
    Last Modified:May 29, 2026
    EPS:May 29, 2026
    EPSS Score:
    CVSS Score:7.3

    Affected Products

    Vendor
    Shibby
    Product
    Tomato

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-664 Server Side Request Forgery

    Related CVEs

    CVE-2026-19036 (CVSS 7.3) — A security flaw has been discovered in Shibby Tomato 1.28.0000. This affects the function sub_40F88C of the fi…
    CVE-2026-19035 (CVSS 7.3) — A vulnerability was identified in Shibby Tomato 1.28.0000. Affected by this issue is the function new_qoslimit…
    CVE-2026-19034 (CVSS 7.3) — A vulnerability was determined in Shibby Tomato 1.28.0000. Affected by this vulnerability is the function new_…
    CVE-2026-16097 (CVSS 8.7) — A vulnerability was found in Shibby Tomato 1.28. This vulnerability affects the function sub_42537C of the com…
    CVE-2026-16096 (CVSS 8.7) — A vulnerability has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. This affects the function sub_40…
    CVE-2026-16095 (CVSS 8.7) — A flaw has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. Affected by this issue is the function se…
    CVE-2026-15548 (CVSS 7.4) — A security vulnerability has been detected in Shibby Tomato up to 1.28.0000. This vulnerability affects the fu…
    CVE-2026-15547 (CVSS 2.1) — A weakness has been identified in Shibby Tomato up to 1.28.0000. This affects the function sub_2D048 of the co…
    CVE-2026-15546 (CVSS 2.1) — A security flaw has been discovered in Shibby Tomato up to 1.28.0000. Affected by this issue is the function s…
    CVE-2026-15545 (CVSS 7.4) — A vulnerability was identified in Shibby Tomato up to 1.28.0000. Affected by this vulnerability is the functio…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High