VDB
CVE-2026-19509
CVE-2026-19509
PUBLISHED
Reported by certcc · Published August 19, 2026
Improper input validation in `ajaxSet_wireless_network_configuration.jst` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows an authenticated attacker to cause denial of service via a crafted `ssid_number` parameter.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| RDK | RDK-B WebUI | rdkb-2025q4-kirkstone |
| RDK | RDK-B WebUI | rdkb-2025q4-kirkstone |
Timeline
- Aug 19, 2026 CVE Published
- Aug 19, 2026 CVE Updated
- Aug 22, 2026 Coalition ESS Score