CVE-2026-15545 | Shibby Tomato up to 1.28.0000 apcupsd tomatodata.cgi main out-of-bounds write (IJTQ5N)

A vulnerability was found in Shibby Tomato up to 1.28.0000. It has been declared as critical. Affected by this vulnerability is the function main of the file www/apcupsd/tomatodata.cgi of the component apcupsd. Such manipulation leads to out-of-bounds write.

This vulnerability is traded as CVE-2026-15545. The attack may be launched remotely. Furthermore, there is an exploit available.

This project is superseded by FreshTomato.