high8.8
CVE-2026-10066
A security vulnerability has been detected in Shibby Tomato up to 1.28.
Impact
A security vulnerability has been detected in Shibby Tomato up to 1.28. This issue affects the function sub_9068 of the file tomatoups.cgi of the component UPS Service. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. This project is superseded by FreshTomato. This vulnerability only affects products that are no longer supported by the maintainer.
Affected products
| Product | Affected versions |
|---|---|
| Shibby Tomato | before 1.28. |
Versions were read from the advisory text. No structured product data has been published for this record yet.