CVE-2026-10065

Shibby Tomato tomatodata.cgi get_ups_field stack-based overflow

CVSS 8.7 HIGHEPSS 0.4%CWE-119 CWE-121

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 8.7EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

29 mai 2026Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A weakness has been identified in Shibby Tomato 1.28. This vulnerability affects the function get_ups_field of the file tomatodata.cgi. Executing a manipulation of the argument Date can lead to stack-based buffer overflow. It is possible to launch the attack remotely. This project is superseded by FreshTomato. This vulnerability only affects products that are no longer supported by the maintainer.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X

Produtos afetados

Shibby · Tomato

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://gitee.com/Fengyi-Wang/CVE/issues/IJK7BC https://vuldb.com/submit/818144 https://vuldb.com/vuln/367151 https://vuldb.com/vuln/367151/cti