Security Advisory

CVE-2026-16095

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-18 10:15:09
Last updated 2026-07-20 13:42:34
Assigner VulDB
CVSS score 8.7
State PUBLISHED

Description

A flaw has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. Affected by this issue is the function setup_conntrack of the file /sbin/rc. Executing a manipulation of the argument ct_tcp_timeout can lead to out-of-bounds write. The attack may be performed from remote. This project is superseded by FreshTomato.