PT-2026-45103 · Shibby · Tomato

Published 2026-05-30 · Updated 2026-05-30 · CVE-2026-10124

NVD

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

A vulnerability was determined in Shibby Tomato up to 1.28. Affected is the function rip zebra read ipv4 of the file /usr/sbin/ripd of the component Zserv Handler. Executing a manipulation can lead to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. This project is superseded by FreshTomato. This vulnerability only affects products that are no longer supported by the maintainer.

Exploit

Fix

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-119

Related Identifiers

CVE-2026-10124

Affected Products

Tomato

References · 5

• 🔥 https://gitee.com/Fengyi-Wang/CVE/issues/IJ9FFG · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-10124 · Security Note
• https://vuldb.com/vuln/367301/cti · Note
• https://vuldb.com/vuln/367301 · Note
• https://vuldb.com/submit/818239 · Note