CVE-2026-15547

MEDIUM 6.3

Shibby Tomato CIFS Mount sub_2D048 os command injection

CVSS Score

6.3

EPSS Score

1.1%

EPSS Percentile

60th

A weakness has been identified in Shibby Tomato up to 1.28.0000. This affects the function sub_2D048 of the component CIFS Mount Handler. Executing a manipulation of the argument cifs1/cifs2 can lead to os command injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. This project is superseded by FreshTomato.

CWE	CWE-78 CWE-77
Vendor	shibby
Product	tomato
Published	Jul 13, 2026
Last Updated	Jul 13, 2026

Stay Ahead of the Next One

Get instant alerts for shibby tomato

Be the first to know when new medium vulnerabilities affecting shibby tomato are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

Shibby / Tomato

1.0 1.1 1.2 1.3 1.4 1.5 1.6 1.7 1.8 1.9 1.10 1.11 1.12 1.13 1.14 1.15 1.16 1.17 1.18 1.19 1.20 1.21 1.22 1.23 1.24 1.25 1.26 1.27 1.28.0000

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/377897 vuldb.com: https://vuldb.com/vuln/377897/cti vuldb.com: https://vuldb.com/cve/CVE-2026-15547 vuldb.com: https://vuldb.com/submit/855117 gitee.com: https://gitee.com/Fengyi-Wang/CVE/issues/IJTQ5P

Credits

VulDB Gitee Analyzer VulDB CNA Team