CVE-2026-10065CWE-119CWE-121

Shibby Tomato tomatodata.cgi get_ups_field stack-based overflow

High · published May 29, 2026

CVSS v4.0
8.7
EPSS
0%
Percentile
37.0
In the wild
Unconfirmed
What it is

A weakness has been identified in Shibby Tomato 1.28. This vulnerability affects the function get_ups_field of the file tomatodata.cgi. Executing a manipulation of the argument Date can lead to stack-based buffer overflow. It is possible to launch the attack remotely. This project is superseded by FreshTomato. This vulnerability only affects products that are no longer supported by the maintainer.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X
EPSS
0.00438 · 37.0th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-121 · Stack-based Buffer Overflow
Published
2026-05-29T15:00Z
EPSS history
Timeline
  • 29 MAY 15:00Z
    Shibby Tomato tomatodata.cgi get_ups_field stack-based overflow
    cvelistv5