Skip to content
Threat Feed
Subscribe

Tag

CVE-2026-16095

1 brief RSS
high advisory

Shibby Tomato Router Firmware Out-of-Bounds Write Vulnerability (CVE-2026-16095)

A remote out-of-bounds write vulnerability, CVE-2026-16095, affects Shibby Tomato firmware version 1.28 RT-N5x MIPSR2 Build 124, where manipulating the `ct_tcp_timeout` argument in the `setup_conntrack` function of `/sbin/rc` can lead to memory corruption, potentially allowing arbitrary code execution or denial of service.

Tomato 1.28 RT-N5x MIPSR2 Build 124 vulnerability router firmware out-of-bounds-write CVE-2026-16095
3t 2c