CVE-2026-15545 in Tomato

Prediction

by VulDB Data Team • 07/12/2026

A vulnerability was identified in Shibby Tomato up to 1.28.0000. Affected by this vulnerability is the function main of the file www/apcupsd/tomatodata.cgi of the component apcupsd. Such manipulation leads to out-of-bounds write. The attack may be launched remotely. The exploit is publicly available and might be used. This project is superseded by FreshTomato.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-377895
• CPE: ready
• CWE: CWE-787 (confirmed)
• Exploit: Download
• CVSS: 8.8 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-15545
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-15545
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-15545/