today ZDI warned about a vulnerablility in the httpd deamon of several netgear routers:
www.zerodayinitiative.com
and:
blog.grimm-co.com
does this affect tomato's httpd deamon as well?
ZDI-20-712
(0Day) NETGEAR R6700 httpd Firmware Upload Stack-based Buffer Overflow Remote Code Execution Vulnerability

SOHO Device Exploitation
Netgear R7000 SOHO Device Exploitation After a long day of hard research, it’s fun to relax, kick back, and do something easy. While modern ...