CVE-2026-16097

CVE-2026-16097 affects Shibby Tomato 1.28, specifically the Scheduler Name Handler’s sub_42537C function. Manipulating the argument a1 yields a stack-based buffer overflow, with remote execution possible. The issue is noted as superseded by FreshTomato. CVSS metrics in the accompanying data indic...

PT-2026-60933

A vulnerability has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. This affects the function sub 40BB50 of the file /proc/webmon recent domains. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. This project is superseded by...