CVE-2026-19509

UNKNOWN 0.0

RDK WebUI DOS vulnerability

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Improper input validation in `ajaxSet_wireless_network_configuration.jst` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows an authenticated attacker to cause denial of service via a crafted `ssid_number` parameter.

Vendor	rdk
Product	rdk-b webui
Published	Aug 19, 2026

Stay Ahead of the Next One

Get instant alerts for rdk rdk-b webui

Be the first to know when new unknown vulnerabilities affecting rdk rdk-b webui are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

RDK / RDK-B WebUI

rdkb-2025q4-kirkstone

References

NVD ↗ CVE.org ↗ EPSS Data ↗

whitehats.pwr.edu.pl: https://whitehats.pwr.edu.pl//blog/2026-08-19-multiple-vulnerabilities-in-rdkb/ developer.rdkcentral.com: https://developer.rdkcentral.com/documentation/documentation/rdk_broadband_documentation/components/webui/