CVE-2026-16095 – Shibby Tomato rc setup_conntrack out-of-bounds write

CVE ID :CVE-2026-16095

Published : July 18, 2026, 11:16 a.m. | 23 minutes ago

Description :A flaw has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. Affected by this issue is the function setup_conntrack of the file /sbin/rc. Executing a manipulation of the argument ct_tcp_timeout can lead to out-of-bounds write. The attack may be performed from remote. This project is superseded by FreshTomato.

Severity: 9.0 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…