Skip to content
Threat Feed
Subscribe

Vendor

Shibby

6 briefs RSS
high threat

Remote OS Command Injection in Shibby Tomato

Shibby Tomato version 1.28.0000 is vulnerable to remote OS command injection via the wan_iface parameter in the new_qoslimit_stop function, allowing unauthenticated or authenticated administrative attackers to execute arbitrary code.

exploited Tomato
3t 2c
high advisory

Shibby Tomato Router Firmware Out-of-Bounds Write Vulnerability (CVE-2026-16095)

A remote out-of-bounds write vulnerability, CVE-2026-16095, affects Shibby Tomato firmware version 1.28 RT-N5x MIPSR2 Build 124, where manipulating the `ct_tcp_timeout` argument in the `setup_conntrack` function of `/sbin/rc` can lead to memory corruption, potentially allowing arbitrary code execution or denial of service.

Tomato 1.28 RT-N5x MIPSR2 Build 124 vulnerability router firmware out-of-bounds-write CVE-2026-16095
3t 2c
high advisory

Shibby Tomato Router Firmware Stack-Based Buffer Overflow (CVE-2026-15548)

A critical stack-based buffer overflow vulnerability (CVE-2026-15548) exists in Shibby Tomato router firmware versions up to 1.28.0000, specifically in the `sub_407220` function of the `/usr/sbin/httpd` component related to DNS List Rendering, allowing remote attackers to achieve high impact on confidentiality, integrity, and availability.

Tomato router firmware buffer-overflow rce CVE-2026-15548
2t 1c
high advisory

Shibby Tomato Firmware Vulnerability CVE-2026-15545 Leads to Remote Out-of-Bounds Write

A critical out-of-bounds write vulnerability (CVE-2026-15545) exists in Shibby Tomato firmware up to version 1.28.0000, specifically within the `main` function of the `www/apcupsd/tomatodata.cgi` file in the `apcupsd` component, which can be exploited remotely with a publicly available exploit, posing a significant risk to affected network devices.

Tomato vulnerability firmware router out-of-bounds-write CVE
2t 1c
high threat

Shibby Tomato Firmware Vulnerability CVE-2026-15544 Enables Remote Code Execution

A stack-based buffer overflow vulnerability, identified as CVE-2026-15544, exists in the `getupsvar` function within the `www/apcupsd/tomatodata.cgi` file of the `apcupsd` component in Shibby Tomato firmware versions up to and including 1.28.0000, allowing a remote attacker to achieve arbitrary code execution by manipulating the `Field` argument.

exploited Tomato buffer-overflow rce firmware router cve
2t 1c
high threat

Shibby Tomato Stack-Based Buffer Overflow Vulnerability (CVE-2026-10124)

A stack-based buffer overflow vulnerability exists in Shibby Tomato up to version 1.28 in the rip_zebra_read_ipv4 function within the /usr/sbin/ripd component (Zserv Handler), allowing a remote attacker to execute arbitrary code.

Tomato +1 cve buffer-overflow router
2r 1t 1c