Skip to content
OpenAdvisories
High · 8.1 CVE-2026-19506 EUVD-2026-62712GHSA-gcr9-cjhj-rh79

RDK-B WebUI race condition vulnerability

Published Aug 19, 2026 · Updated Aug 27, 2026 · Assigned by certcc

Description

Race condition in `check.jst` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows a remote attacker to gain unauthorized access via concurrent authentication requests that exploit shared authentication state.

Affected products

VendorProductAffectedFixed
RDK RDK-B WebUI rdkb-2025q4-kirkstone —

References