ByteOS Network

CVE Vulnerability Details :

CVE-2026-16096

PUBLISHED

More Info Official Page

Assigner-VulDB

Assigner Org ID-1af790b2-7ee1-4545-860a-a788eba489b5

Published At-18 Jul, 2026 | 11:15

Updated At-18 Jul, 2026 | 11:15

▼CVE Numbering Authority (CNA)

Shibby Tomato webmon_recent_domains sub_40BB50 stack-based overflow

A vulnerability has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. This affects the function sub_40BB50 of the file /proc/webmon_recent_domains. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. This project is superseded by FreshTomato.

Affected Products

Vendor

Shibby

Product

Tomato

CPEs

cpe:2.3:a:shibby:tomato:*:*:*:*:*:*:*:*

Versions

Affected

1.28 RT-N5x MIPSR2 Build 124

Problem Types

Type	CWE ID	Description
CWE	CWE-121	Stack-based Buffer Overflow
CWE	CWE-119	Memory Corruption

Type: CWE

CWE ID: CWE-121

Description: Stack-based Buffer Overflow

Type: CWE

CWE ID: CWE-119

Description: Memory Corruption

Metrics

Version	Base score	Base severity	Vector
4.0	8.7	HIGH	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X
3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:X/RL:X/RC:R
3.0	8.8	HIGH	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:X/RL:X/RC:R
2.0	9.0	N/A	AV:N/AC:L/Au:S/C:C/I:C/A:C/E:ND/RL:ND/RC:UR

Version: 4.0

Base score: 8.7

Base severity: HIGH

Vector:

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:X/RL:X/RC:R

Version: 3.0

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:X/RL:X/RC:R

Version: 2.0

Base score: 9.0

Base severity: N/A

Vector:

AV:N/AC:L/Au:S/C:C/I:C/A:C/E:ND/RL:ND/RC:UR

Credits

reporter

Cormac315 (VulDB User)

coordinator

VulDB CNA Team

Timeline

Event	Date
Advisory disclosed	2026-07-17 00:00:00
VulDB entry created	2026-07-17 02:00:00
VulDB entry last update	2026-07-17 16:19:36

Event: Advisory disclosed

Date: 2026-07-17 00:00:00

Event: VulDB entry created

Date: 2026-07-17 02:00:00

Event: VulDB entry last update

Date: 2026-07-17 16:19:36

References

Hyperlink	Resource
https://vuldb.com/vuln/379800	vdb-entry technical-description
https://vuldb.com/vuln/379800/cti	signature permissions-required
https://vuldb.com/cve/CVE-2026-16096	third-party-advisory
https://vuldb.com/submit/855124	third-party-advisory
https://gitee.com/Fengyi-Wang/CVE/issues/IJTQ5T	issue-tracking