High severity8.8NVD Advisory· Published Jul 13, 2026· Updated Jul 15, 2026

CVE-2026-15548

Description

A security vulnerability has been detected in Shibby Tomato up to 1.28.0000. This vulnerability affects the function sub_407220 of the file /usr/sbin/httpd of the component DNS List Rendering. The manipulation leads to stack-based buffer overflow. The attack is possible to be carried out remotely. This project is superseded by FreshTomato.

Affected products

Shibby/Tomatollm-fuzzy
Range: <=1.28.0000

Patches

Vulnerability mechanics

References

gitee.com/Fengyi-Wang/CVE/issues/IJTQ5Rnvd
vuldb.com/cve/CVE-2026-15548nvd
vuldb.com/submit/855121nvd
vuldb.com/vuln/377898nvd
vuldb.com/vuln/377898/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000