PT-2026-57649 · Shibby · Tomato

Published 2026-07-13 · Updated 2026-07-13 · CVE-2026-15544

Mitre

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A vulnerability was determined in Shibby Tomato up to 1.28.0000. Affected is the function getupsvar of the file www/apcupsd/tomatodata.cgi of the component apcupsd. This manipulation of the argument Field causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. This project is superseded by FreshTomato.

Exploit

Fix

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-119

Related Identifiers

CVE-2026-15544

Affected Products

Tomato

References · 6

• 🔥 https://gitee.com/Fengyi-Wang/CVE/issues/IJTQ5M · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-15544 · Security Note
• https://vuldb.com/vuln/377894/cti · Note
• https://vuldb.com/cve/CVE-2026-15544 · Note
• https://vuldb.com/vuln/377894 · Note
• https://vuldb.com/submit/855110 · Note