Skip to content
OpenAdvisories

Vendor

RDK

5 known vulnerabilities.

Products

RDK-B WebUI 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-19508

    RDK WebUI heap-based buffer overflow vulnerability

    Heap-based buffer overflow in the multipart form-data parser in `jst_post.c` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows a remote unauthenticated attacker to cause memory corruption and denial of service, and potentially execute arbitrary code, via…

    RDK RDK-B WebUI
  • Critical 9.8
    CVE-2026-19505

    RDK-B WebUI improper cryptographic signature verification vulnerability

    Improper cryptographic signature verification in `jst_functions.c` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows a remote attacker to bypass authentication and obtain administrative access via a forged JWT containing an invalid RSA signature.

    RDK RDK-B WebUI