CVE-2026-16095 | Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124 /sbin/rc setup_conntrack ct_tcp_timeout out-of-bounds write (IJTQ5S)

July 17, 2026 Yanac

A vulnerability was found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. It has been declared as critical. Affected by this issue is the function setup_conntrack of the file /sbin/rc. Executing a manipulation of the argument ct_tcp_timeout can lead to out-of-bounds write.

This vulnerability appears as CVE-2026-16095. The attack may be performed from remote. There is no available exploit.

This project is superseded by FreshTomato.VulDB Recent EntriesRead More