CVE-2026-19036

Shibby Tomato CVE-2026-19036 affects the wanoptions component: the function sub_40F88C in /tmp/ppp/wanoptions is vulnerable when processing the ppp_custom argument, enabling OS command injection. The issue can be triggered remotely, and public exploits exist. The affected product/version is Shibb...

CVE-2026-19036 Shibby Tomato wanoptions sub_40F88C os command injection

A security flaw has been discovered in Shibby Tomato 1.28.0000. This affects the function sub40F88C of the file /tmp/ppp/wanoptions. The manipulation of the argument pppcustom results in os command injection. The attack may be launched remotely. The exploit has been released to the public and may...

PT-2026-68480

Name of the Vulnerable Software and Affected Versions Shibby Tomato version 1.28.0000 Description A remote OS command injection flaw exists in the sub 40F88C function within the /tmp/ppp/wanoptions file. This issue occurs when the ppp custom argument is manipulated, allowing an attacker to execut...