CVE-2026-10069CWE-400CWE-404

Shibby Tomato miniupnpd resource consumption

High · published May 29, 2026

CVSS v4.0
8.7
EPSS
0%
Percentile
37.0
In the wild
Unconfirmed
What it is

A vulnerability has been found in Shibby Tomato 1.28. The impacted element is an unknown function of the file usr/sbin/miniupnpd. Such manipulation leads to resource consumption. The attack may be launched remotely. This project is superseded by FreshTomato. This vulnerability only affects products that are no longer supported by the maintainer.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X
EPSS
0.00438 · 37.0th percentile
Weaknesses
CWE-400 · Uncontrolled Resource Consumption; CWE-404 · Improper Resource Shutdown or Release
Published
2026-05-29T16:00Z
EPSS history
Timeline
  • 29 MAY 16:00Z
    Shibby Tomato miniupnpd resource consumption
    cvelistv5