← Back to CVE search

CVE-2026-16095

Shibby Tomato

Description

A flaw has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. Affected by this issue is the function setup_conntrack of the file /sbin/rc. Executing a manipulation of the argument ct_tcp_timeout can lead to out-of-bounds write. The attack may be performed from remote. This project is superseded by FreshTomato.

CVSS 8.8EPSS 0.41900000000000004%Risk 0.91
View source
Published
2026-07-18 11:16:43
Affected versions
unknown
Type
Firmware
Last modified
2026-07-20 15:16:35
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H