FreshTomato — Vulnerabilities & Security Advisories 5

FreshTomato is an open-source firmware project for routers and network devices, focusing on enhancing functionality and performance. Historically, it has been susceptible to multiple remote code execution (RCE) and cross-site scripting (XSS) vulnerabilities, often stemming from improper input validation and insecure web interfaces. Privilege escalation flaws have also been documented, allowing unauthorized access to administrative functions. With five CVEs currently recorded, the project has experienced security incidents related to command injection and authentication bypasses. These vulnerabilities typically arise from legacy code and insufficient sanitization of user-supplied data, posing risks to network infrastructure integrity.