Shibby

Products

ProductCVEsExploitedLatest
Tomato21–Aug 6, 2026

Exploited and recent CVEs

  • CVE-2026-19036 High 7.2 Shibby Tomato wanoptions sub_40F88C os command injection 3.2%
  • CVE-2026-19035 High 7.2 Shibby Tomato qoslimit new_qoslimit_start os command injection 3.2%
  • CVE-2026-19034 High 7.2 Shibby Tomato qoslimittc_stop.sh new_qoslimit_stop os command injection 3.2%
  • CVE-2026-16097 High 8.8 Shibby Tomato Scheduler Name sub_42537C stack-based overflow 0.8%
  • CVE-2026-16096 High 8.8 Shibby Tomato webmon_recent_domains sub_40BB50 stack-based overflow 0.5%
  • CVE-2026-16095 High 8.8 Shibby Tomato rc setup_conntrack out-of-bounds write 0.7%
  • CVE-2026-15548 High 8.8 Shibby Tomato DNS List Rendering httpd sub_407220 stack-based overflow 0.8%
  • CVE-2026-15547 Medium 6.3 Shibby Tomato CIFS Mount sub_2D048 os command injection 1.8%
  • CVE-2026-15546 Medium 6.3 Shibby Tomato start_jffs2 sub_2D568 os command injection 1.8%
  • CVE-2026-15545 High 8.8 Shibby Tomato apcupsd tomatodata.cgi main out-of-bounds write 0.7%
  • CVE-2026-15544 High 8.8 Shibby Tomato apcupsd tomatodata.cgi getupsvar stack-based overflow 0.8%
  • CVE-2026-10873 High 7.2 Shibby Tomato Web UI rstats rstats_path os command injection 2.7%
  • CVE-2026-10872 High 7.2 Shibby Tomato Web UI rc start_vpnserver os command injection 2.6%
  • CVE-2026-10871 High 7.2 Shibby Tomato Web UI rc start_6rd_tunnel os command injection 2.2%
  • CVE-2026-10870 High 7.2 Shibby Tomato Web UI rc start_dhcpc os command injection 2.2%
  • CVE-2026-10124 High 8.8 Shibby Tomato Zserv ripd rip_zebra_read_ipv4 stack-based overflow 0.5%
  • CVE-2026-10069 High 7.5 Shibby Tomato miniupnpd resource consumption 0.4%
  • CVE-2026-10068 High 7.3 Shibby Tomato SUBSCRIBE Call miniupnpd send server-side request forgery 0.3%
  • CVE-2026-10067 High 8.8 Shibby Tomato multimon.cgi sub_90F0 stack-based overflow 0.4%
  • CVE-2026-10066 High 8.8 Shibby Tomato UPS Service tomatoups.cgi sub_9068 stack-based overflow 0.4%
  • CVE-2026-10065 High 8.8 Shibby Tomato tomatodata.cgi get_ups_field stack-based overflow 0.4%