PT-2026-44885 · Shibby · Tomato

Cormac315 · Published 2026-05-29 · Updated 2026-05-29 · CVE-2026-10066

Mitre

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A security vulnerability has been detected in Shibby Tomato up to 1.28. This issue affects the function sub 9068 of the file tomatoups.cgi of the component UPS Service. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. This project is superseded by FreshTomato. This vulnerability only affects products that are no longer supported by the maintainer.

Fix

Buffer Overflow

Stack Overflow

Weakness Enumeration

CWE-119

CWE-121

Related Identifiers

CVE-2026-10066

Affected Products

Tomato

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-10066 · Security Note
• https://vuldb.com/vuln/367152/cti · Note
• https://vuldb.com/vuln/367152 · Note
• https://vuldb.com/submit/818145 · Note
• https://gitee.com/Fengyi-Wang/CVE/issues/IJK7BD · Note