CVE-2026-19034 | Shibby Tomato 1.28.0000 /tmp/qoslimittc_stop.sh new_qoslimit_stop wan_iface os command injection

August 6, 2026 Yanac

A vulnerability labeled as critical has been found in Shibby Tomato 1.28.0000. Affected by this vulnerability is the function new_qoslimit_stop of the file /tmp/qoslimittc_stop.sh. Executing a manipulation of the argument wan_iface can lead to os command injection.

This vulnerability is tracked as CVE-2026-19034. The attack can be launched remotely. Moreover, an exploit is present.

This project is superseded by FreshTomato.VulDB Recent EntriesRead More