CVE Tools

Shibby

8 CVEs tracked since 2026. Since Jul 2026, none of them reached CISA KEV.

Shibby CVEs per month

Jul 2026 to Jul 2026. Point at a month, or focus the strip and use the arrow keys.
Shibby CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2026-0780

Products

The products that kept showing up in Shibby's monthly top three, with their CVEs summed over those months.

  1. Tomato81 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Shibby.

  1. CVE-2026-19036Shibby Tomato wanoptions sub_40F88C os command injection7.2
  2. CVE-2026-19035Shibby Tomato qoslimit new_qoslimit_start os command injection7.2
  3. CVE-2026-19034Shibby Tomato qoslimittc_stop.sh new_qoslimit_stop os command injection7.2
  4. CVE-2026-16097Shibby Tomato Scheduler Name sub_42537C stack-based overflow8.8
  5. CVE-2026-16096Shibby Tomato webmon_recent_domains sub_40BB50 stack-based overflow8.8
  6. CVE-2026-16095Shibby Tomato rc setup_conntrack out-of-bounds write8.8
  7. CVE-2026-15548Shibby Tomato DNS List Rendering httpd sub_407220 stack-based overflow8.8
  8. CVE-2026-15547Shibby Tomato CIFS Mount sub_2D048 os command injection6.3
  9. CVE-2026-15546Shibby Tomato start_jffs2 sub_2D568 os command injection6.3
  10. CVE-2026-15545Shibby Tomato apcupsd tomatodata.cgi main out-of-bounds write8.8
  11. CVE-2026-15544Shibby Tomato apcupsd tomatodata.cgi getupsvar stack-based overflow8.8
  12. CVE-2026-10873Shibby Tomato Web UI rstats rstats_path os command injection7.2
  13. CVE-2026-10872Shibby Tomato Web UI rc start_vpnserver os command injection7.2
  14. CVE-2026-10871Shibby Tomato Web UI rc start_6rd_tunnel os command injection7.2
  15. CVE-2026-10870Shibby Tomato Web UI rc start_dhcpc os command injection7.2

The record

Peak rank
#177 in Jul 2026
Busiest month shown
Jul 2026, 8 CVEs
Months with a KEV entry
0 since Jul 2026
Monthly snapshots
1 since 2026
Shibby's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store