CVE-2026-15548 in Tomato

Sumário

de MITRE • 13/07/2026

A security vulnerability has been detected in Shibby Tomato up to 1.28.0000. This vulnerability affects the function sub_407220 of the file /usr/sbin/httpd of the component DNS List Rendering. The manipulation leads to stack-based buffer overflow. The attack is possible to be carried out remotely. This project is superseded by FreshTomato.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsável: VulDB
• Divulgação: 13/07/2026
• Moderação: aceite
• Entrada: VDB-377898
• CPE: pronto
• CWE: CWE-121 (confirmado)
• CVSS: 8.8 (VulDB)
• EPSS: 0.00000
• KEV: não
• Atividades: baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-15548
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-15548
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-15548/