CVE-2026-19035 | Shibby Tomato 1.28.0000 /etc/qoslimit new_qoslimit_start new_qoslimit_enable os command injection

August 6, 2026 Yanac

A vulnerability marked as critical has been reported in Shibby Tomato 1.28.0000. Affected by this issue is the function new_qoslimit_start of the file /etc/qoslimit. The manipulation of the argument new_qoslimit_enable leads to os command injection.

This vulnerability is listed as CVE-2026-19035. The attack may be initiated remotely. In addition, an exploit is available.

This project is superseded by FreshTomato.VulDB Recent EntriesRead More