CVE Watch19 ago 2026

CVE-2026-19506

Race condition in `check.jst` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows a remote attacker to gain unauthorized access via concu

CVSS

—

Sin CVSS

EPSS

—

KEV

—

Exploit Today

0-100

Publicado: 19 ago 2026 · Última mod.: 19 ago 2026

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Race condition in `check.jst` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows a remote attacker to gain unauthorized access via concurrent authentication requests that exploit shared authentication state.

Referencias oficiales

developer.rdkcentral.comhttps://developer.rdkcentral.com/documentation/documentation/rdk_broadband_documentation/components/webui/
whitehats.pwr.edu.plhttps://whitehats.pwr.edu.pl//blog/2026-08-19-multiple-vulnerabilities-in-rdkb/

CVEs relacionados

Sin CVEs relacionados por CWE o producto.