CVE-2026-10066
HIGH
NVD
CVSS Score
8.8
Severity
HIGH
Published
May 29, 2026
Vendor
unknown
Description
A security vulnerability has been detected in Shibby Tomato up to 1.28. This issue affects the function sub_9068 of the file tomatoups.cgi of the component UPS Service. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. This project is superseded by FreshTomato. This vulnerability only affects products that are no longer supported by the maintainer.