CVE-2026-10124 | Shibby Tomato up to 1.28 Zserv /usr/sbin/ripd rip_zebra_read_ipv4 stack-based overflow (IJ9FFG)

A vulnerability labeled as critical has been found in Shibby Tomato up to 1.28. Affected is the function rip_zebra_read_ipv4 of the file /usr/sbin/ripd of the component Zserv Handler. Executing a manipulation can lead to stack-based buffer overflow. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is registered as CVE-2026-10124. It is possible to launch the attack remotely. Furthermore, an exploit is available.

This project is superseded by FreshTomato.