CVE-2026-15545
published 2026-07-13CVE-2026-15545: A vulnerability was identified in Shibby Tomato up to 1.28.0000. Affected by this vulnerability is the function main of the file www/apcupsd/tomatodata.cgi of…
PriorityP261high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
0.73%
52.3th percentile
A vulnerability was identified in Shibby Tomato up to 1.28.0000. Affected by this vulnerability is the function main of the file www/apcupsd/tomatodata.cgi of the component apcupsd. Such manipulation leads to out-of-bounds write. The attack may be launched remotely. The exploit is publicly available and might be used. This project is superseded by FreshTomato.
Affected
29 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| shibby | tomato | — | — |
| shibby | tomato | — | — |
| shibby | tomato | — | — |
| shibby | tomato | — | — |
| shibby | tomato | — | — |
| shibby | tomato | — | — |
| shibby | tomato | — | — |
| shibby | tomato | — | — |
| shibby | tomato | — | — |
| shibby | tomato | — | — |
| shibby | tomato | — | — |
| shibby | tomato | — | — |
| shibby | tomato | — | — |
| shibby | tomato | — | — |
| shibby | tomato | — | — |
| shibby | tomato | — | — |
| shibby | tomato | — | — |
| shibby | tomato | — | — |
| shibby | tomato | — | — |
| shibby | tomato | — | — |
| shibby | tomato | — | — |
| shibby | tomato | — | — |
| shibby | tomato | — | — |
| shibby | tomato | — | — |
| shibby | tomato | — | — |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv4.07.4HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
nvdv2.09.0CRITICALAV:N/AC:L/Au:S/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
A vulnerability was identified in Shibby Tomato up to 1.28.0000.
ghsa_unreviewed·2026-07-13
CVE-2026-15545 [HIGH] CWE-119 A vulnerability was identified in Shibby Tomato up to 1.28.0000.
A vulnerability was identified in Shibby Tomato up to 1.28.0000. Affected by this vulnerability is the function main of the file www/apcupsd/tomatodata.cgi of the component apcupsd. Such manipulation leads to out-of-bounds write. The attack may be launched remotely. The exploit is publicly available and might be used. This project is superseded by FreshTomato.
VulDB
Shibby Tomato up to 1.28.0000 apcupsd tomatodata.cgi main out-of-bounds write (IJTQ5N)
vuldb·2026-07-12
CVE-2026-15545 [CRITICAL] Shibby Tomato up to 1.28.0000 apcupsd tomatodata.cgi main out-of-bounds write (IJTQ5N)
A vulnerability was found in Shibby Tomato up to 1.28.0000. It has been declared as critical. Affected by this vulnerability is the function main of the file www/apcupsd/tomatodata.cgi of the component apcupsd. Such manipulation leads to out-of-bounds write.
This vulnerability is traded as CVE-2026-15545. The attack may be launched remotely. Furthermore, there is an exploit available.
This project is superseded by FreshTomato.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-07-13
Published