CVE-2026-15547: Improper Neutralization of Special Elements used in an OS Command

A weakness has been identified in Shibby Tomato up to 1.28.0000. This affects the function sub2D048 of the component CIFS Mount Handler. Executing a manipulation of the argument cifs1/cifs2 can lead to os command injection. The attack can be executed remotely. The exploit has been made available ...

PT-2026-57658

Name of the Vulnerable Software and Affected Versions Shibby Tomato versions prior to 1.28.0000 Description A weakness in the CIFS Mount Handler component allows remote attackers to perform OS command injection. This occurs through the manipulation of the cifs1/cifs2 arguments within the sub 2D04...