Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Tomato — Vulnerabilities & Security Advisories 21

All 21 CVE vulnerabilities found in Tomato, with AI-generated Chinese analysis, references, and POCs.

This page catalogs known security vulnerabilities within the Tomato network firmware developed by Jowens. It aggregates common weakness types associated with embedded device management interfaces and router configurations. The collection includes reported issues ranging from arbitrary code execution and buffer overflows to information disclosure and denial-of-service conditions. These entries span from the earliest tracked releases through late 2023, ensuring a comprehensive historical view of the software's security posture over its development lifecycle. Users can utilize this resource to track vendor advisories and monitor how Jowens has addressed critical flaws over time. The page facilitates a deeper understanding of specific weakness classes prevalent in open-source router firmware, such as insecure default configurations or unpatched library dependencies. Additionally, it allows researchers and system administrators to look up the complete vulnerability history of the Tomato product, identifying trends in recurring security defects. By centralizing this data, the page supports informed decision-making for deployment security and helps users assess the risk profile of their network infrastructure. This structured approach to vulnerability aggregation enables efficient correlation between reported flaws and their potential impact on network stability and data confidentiality.

Vendor: Shibby

CVE ID Title CVSS Severity Published
CVE-2026-19036 Shibby Tomato wanoptions sub_40F88C os command injection CWE-78 7.2 High 2026-08-06
CVE-2026-19035 Shibby Tomato qoslimit new_qoslimit_start os command injection CWE-78 7.2 High 2026-08-06
CVE-2026-19034 Shibby Tomato qoslimittc_stop.sh new_qoslimit_stop os command injection CWE-78 7.2 High 2026-08-06
CVE-2026-16097 Shibby Tomato Scheduler Name sub_42537C stack-based overflow CWE-121 8.8 High 2026-07-18
CVE-2026-16096 Shibby Tomato webmon_recent_domains sub_40BB50 stack-based overflow CWE-121 8.8 High 2026-07-18
CVE-2026-16095 Shibby Tomato rc setup_conntrack out-of-bounds write CWE-787 8.8 High 2026-07-18
CVE-2026-15548 Shibby Tomato DNS List Rendering httpd sub_407220 stack-based overflow CWE-121 8.8 High 2026-07-13
CVE-2026-15547 Shibby Tomato CIFS Mount sub_2D048 os command injection CWE-78 6.3 Medium 2026-07-13
CVE-2026-15546 Shibby Tomato start_jffs2 sub_2D568 os command injection CWE-78 6.3 Medium 2026-07-13
CVE-2026-15545 Shibby Tomato apcupsd tomatodata.cgi main out-of-bounds write CWE-787 8.8 High 2026-07-13
CVE-2026-15544 Shibby Tomato apcupsd tomatodata.cgi getupsvar stack-based overflow CWE-121 8.8 High 2026-07-13
CVE-2026-10873 Shibby Tomato Web UI rstats rstats_path os command injection CWE-78 7.2 High 2026-06-04
CVE-2026-10872 Shibby Tomato Web UI rc start_vpnserver os command injection CWE-78 7.2 High 2026-06-04
CVE-2026-10871 Shibby Tomato Web UI rc start_6rd_tunnel os command injection CWE-78 7.2 High 2026-06-04
CVE-2026-10870 Shibby Tomato Web UI rc start_dhcpc os command injection CWE-78 7.2 High 2026-06-04
CVE-2026-10124 Shibby Tomato Zserv ripd rip_zebra_read_ipv4 stack-based overflow CWE-121 8.8 High 2026-05-30
CVE-2026-10069 Shibby Tomato miniupnpd resource consumption CWE-400 7.5 High 2026-05-29
CVE-2026-10068 Shibby Tomato SUBSCRIBE Call miniupnpd send server-side request forgery CWE-918 7.3 High 2026-05-29
CVE-2026-10067 Shibby Tomato multimon.cgi sub_90F0 stack-based overflow CWE-121 8.8 High 2026-05-29
CVE-2026-10066 Shibby Tomato UPS Service tomatoups.cgi sub_9068 stack-based overflow CWE-121 8.8 High 2026-05-29
CVE-2026-10065 Shibby Tomato tomatodata.cgi get_ups_field stack-based overflow CWE-121 8.8 High 2026-05-29

All 21 known CVE vulnerabilities affecting Tomato with full Chinese analysis, references, and POCs where available.