PT-2026-44885 · Shibby · Tomato

Cormac315 · Publicado 2026-05-29 · Atualizado 2026-05-29 · CVE-2026-10066

Mitre

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A security vulnerability has been detected in Shibby Tomato up to 1.28. This issue affects the function sub 9068 of the file tomatoups.cgi of the component UPS Service. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. This project is superseded by FreshTomato. This vulnerability only affects products that are no longer supported by the maintainer.

Correção

Buffer Overflow

Stack Overflow

Enumeração de Fraquezas

CWE-119

CWE-121

Identificadores relacionados

CVE-2026-10066

Produtos afetados

Tomato

Referências · 5

• https://vuldb.com/vuln/367152/cti · Nota
• https://vuldb.com/vuln/367152 · Nota
• https://vuldb.com/submit/818145 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-10066 · Nota de Segurança
• https://gitee.com/Fengyi-Wang/CVE/issues/IJK7BD · Nota