Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-19509 EUVD-2026-62716GHSA-59c8-jrwr-rjrp

RDK WebUI DOS vulnerability

Published Aug 19, 2026 · Updated Aug 27, 2026 · Assigned by certcc

Description

Improper input validation in `ajaxSet_wireless_network_configuration.jst` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows an authenticated attacker to cause denial of service via a crafted `ssid_number` parameter.

Affected products

VendorProductAffectedFixed
RDK RDK-B WebUI rdkb-2025q4-kirkstone —

References