CVE-2026-10872EPSS p85.1%

CVE-2026-10872CVE-2026-10872

Description

A vulnerability was found in Shibby Tomato 1.28.0000. This issue affects the function start_vpnserver of the file /sbin/rc of the component Web UI. Performing a manipulation results in os command injection. The attack can be initiated remotely. The exploit has been made public and could be used. This project is superseded by FreshTomato.

Scoring

CVSS 7.2 ()
VectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS2.63% probability of exploitation · percentile 85.1% · 2026-10-06T12:00:23Z
Last modified2026-07-22

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2026-10870
CVE
CVE-2026-10871
CVE
CVE-2026-10873
CVE
CVE-2026-10069
CVE
CVE-2026-10124
CVE
CVE-2026-7242
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.