CVE-2026-10069: Shibby Tomato miniupnpd resource consumption

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-05-29 · updated 2026-07-21
Weakness: CWE-400

Description

A vulnerability has been found in Shibby Tomato 1.28. The impacted element is an unknown function of the file usr/sbin/miniupnpd. Such manipulation leads to resource consumption. The attack may be launched remotely. This project is superseded by FreshTomato. This vulnerability only affects products that are no longer supported by the maintainer.

Affected products

Shibby Tomato: 1.28

References

https://gitee.com/Fengyi-Wang/CVE/issues/IJD8SP
https://vuldb.com/submit/818238
https://vuldb.com/vuln/367155
https://vuldb.com/vuln/367155/cti
https://gitee.com/Fengyi-Wang/CVE/issues/IJD8SP

Get alerted when CVE-2026-10069 or the next vulnerability affects your stack