CVE-2026-16095: Out-of-bounds Write in Shibby Tomato
A flaw has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. Affected by this issue is the function setup_conntrack of the file /sbin/rc. Executing a manipulation of the argument ct_tcp_timeout can lead to out-of-bounds write. The attack may be performed from remote. This project is superseded by FreshTomato.
AI Analysis
Technical Summary
This vulnerability (CVE-2026-16095) affects Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. The flaw exists in the setup_conntrack function within the /sbin/rc file, where improper handling of the ct_tcp_timeout argument leads to an out-of-bounds write condition. This memory corruption issue can be exploited remotely without user interaction or elevated privileges. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity. The Shibby Tomato project has been superseded by FreshTomato, but no official fix or patch is currently documented.
Potential Impact
Successful exploitation of this vulnerability could allow an attacker to perform an out-of-bounds write remotely, potentially leading to arbitrary code execution or system instability. The high CVSS score reflects the significant impact on confidentiality, integrity, and availability. However, there are no known exploits in the wild at this time.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the Shibby Tomato project is superseded by FreshTomato, users are advised to consider migrating to FreshTomato if possible. Until an official fix is available, restricting remote access to affected devices and monitoring for unusual activity may reduce exposure.
CVE-2026-16095: Out-of-bounds Write in Shibby Tomato
Description
A flaw has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. Affected by this issue is the function setup_conntrack of the file /sbin/rc. Executing a manipulation of the argument ct_tcp_timeout can lead to out-of-bounds write. The attack may be performed from remote. This project is superseded by FreshTomato.
CVSS v4.0
Score 8.7high
Affected software
cpe:2.3:a:shibby:tomato:*:*:*:*:*:*:*:*AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CVE-2026-16095) affects Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. The flaw exists in the setup_conntrack function within the /sbin/rc file, where improper handling of the ct_tcp_timeout argument leads to an out-of-bounds write condition. This memory corruption issue can be exploited remotely without user interaction or elevated privileges. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity. The Shibby Tomato project has been superseded by FreshTomato, but no official fix or patch is currently documented.
Potential Impact
Successful exploitation of this vulnerability could allow an attacker to perform an out-of-bounds write remotely, potentially leading to arbitrary code execution or system instability. The high CVSS score reflects the significant impact on confidentiality, integrity, and availability. However, there are no known exploits in the wild at this time.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the Shibby Tomato project is superseded by FreshTomato, users are advised to consider migrating to FreshTomato if possible. Until an official fix is available, restricting remote access to affected devices and monitoring for unusual activity may reduce exposure.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-07-17T14:13:59.281Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a5b5ea42d1edb114c7fae8c
Added to database: 07/18/2026, 11:08:20 UTC
Last enriched: 07/25/2026, 22:51:54 UTC
Last updated: 09/01/2026, 10:52:07 UTC
Views: 83
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.