CVE-2026-10873 — Shibby Tomato Web UI rstats rstats_path os command injection
A vulnerability was determined in Shibby Tomato 1.28.0000. Impacted is the function rstats_path of the file /bin/rstats of the component Web UI. Executing a manipulation can lea…
Published: 2026-06-04 · CVSS: 8.6 · CVSS 4.0
A vulnerability was determined in Shibby Tomato 1.28.0000. Impacted is the function rstats_path of the file /bin/rstats of the component Web UI. Executing a manipulation can lead to os command injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. This project is superseded by FreshTomato.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7