Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2026-19508

RDK WebUI heap-based buffer overflow vulnerability

Heap-based buffer overflow in the multipart form-data parser in `jst_post.c` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows a remote unauthenticated attacker to cause memory corruption and denial of service, and potentially execute arbitrary code, via a crafted multipart/form-data request.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Rdk
Products
Rdk-b Webui
CVE-2026-19505

RDK-B WebUI improper cryptographic signature verification vulnerability

Improper cryptographic signature verification in `jst_functions.c` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows a remote attacker to bypass authentication and obtain administrative access via a forged JWT containing an invalid RSA signature.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Rdk
Products
Rdk-b Webui
CVE-2026-19507

RDK WebUI uncontrolled resource consumption

Uncontrolled resource consumption in `check.jst` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows a remote unauthenticated attacker to cause denial of service via excessively large password values.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Rdk
Products
Rdk-b Webui
CVE-2026-19506

RDK-B WebUI race condition vulnerability

Race condition in `check.jst` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows a remote attacker to gain unauthorized access via concurrent authentication requests that exploit shared authentication state.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Rdk
Products
Rdk-b Webui
CVE-2026-19509

RDK WebUI DOS vulnerability

Improper input validation in `ajaxSet_wireless_network_configuration.jst` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows an authenticated attacker to cause denial of service via a crafted `ssid_number` parameter.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Rdk
Products
Rdk-b Webui