CVE-2026-19506

UNKNOWN 0.0

RDK-B WebUI race condition vulnerability

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Race condition in `check.jst` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows a remote attacker to gain unauthorized access via concurrent authentication requests that exploit shared authentication state.

Vendor	rdk
Product	rdk-b webui
Published	Aug 19, 2026

Stay Ahead of the Next One

Get instant alerts for rdk rdk-b webui

Be the first to know when new unknown vulnerabilities affecting rdk rdk-b webui are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

RDK / RDK-B WebUI

rdkb-2025q4-kirkstone

References

NVD ↗ CVE.org ↗ EPSS Data ↗

developer.rdkcentral.com: https://developer.rdkcentral.com/documentation/documentation/rdk_broadband_documentation/components/webui/ whitehats.pwr.edu.pl: https://whitehats.pwr.edu.pl//blog/2026-08-19-multiple-vulnerabilities-in-rdkb/