What is GHSA-3pw4-v8p8-wpvg?

GHSA-3pw4-v8p8-wpvg is a security advisory published by GitHub Security Advisories with High severity. A vulnerability has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. This affects the...

Which CVE IDs does GHSA-3pw4-v8p8-wpvg cover?

GHSA-3pw4-v8p8-wpvg covers the following CVE IDs: CVE-2026-16096. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-3pw4-v8p8-wpvg?

GHSA-3pw4-v8p8-wpvg has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

GHSA-3pw4-v8p8-wpvgHighCVSS 8.8

A vulnerability has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. This affects the...

Vendor

GitHub Security Advisories

Published

July 18, 2026

Last Modified

July 18, 2026

🔗 CVE IDs covered (1)

CVE-2026-16096 →

📋 Description

A vulnerability has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. This affects the function sub_40BB50 of the file /proc/webmon_recent_domains. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. This project is superseded by FreshTomato.

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2026-16096
https://gitee.com/Fengyi-Wang/CVE/issues/IJTQ5T
https://vuldb.com/cve/CVE-2026-16096
https://vuldb.com/submit/855124
https://vuldb.com/vuln/379800
https://vuldb.com/vuln/379800/cti
https://github.com/advisories/GHSA-3pw4-v8p8-wpvg