Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: RDK Clear all filters
TI-2026-15883 CVE-2026-19508 · GHSA-p7m5-wh78-3h6h

RDK WebUI heap-based buffer overflow vulnerability

Priority MEDIUM 51

Heap-based buffer overflow in the multipart form-data parser in `jst_post.c` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows a remote unauthenticated attacker to cause memory corruption and denial of service, and…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00981 Published 2026-08-19 No fix listed CWE-119
TI-2026-15884 CVE-2026-19509 · GHSA-59c8-jrwr-rjrp

RDK WebUI DOS vulnerability

Priority LOW 29

Improper input validation in `ajaxSet_wireless_network_configuration.jst` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows an authenticated attacker to cause denial of service via a crafted `ssid_number` parameter.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00436 Published 2026-08-19 No fix listed CWE-20
TI-2026-15882 CVE-2026-19507 · GHSA-qp83-xrr8-j73f

RDK WebUI uncontrolled resource consumption

Priority MEDIUM 40

Uncontrolled resource consumption in `check.jst` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows a remote unauthenticated attacker to cause denial of service via excessively large password values.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00608 Published 2026-08-19 No fix listed CWE-400
TI-2026-15881 CVE-2026-19506 · GHSA-gcr9-cjhj-rh79

RDK-B WebUI race condition vulnerability

Priority LOW 38

Race condition in `check.jst` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows a remote attacker to gain unauthorized access via concurrent authentication requests that exploit shared authentication state.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00479 Published 2026-08-19 No fix listed CWE-362
TI-2026-15880 CVE-2026-19505 · GHSA-j328-w5qv-gh82

RDK-B WebUI improper cryptographic signature verification vulnerability

Priority MEDIUM 49

Improper cryptographic signature verification in `jst_functions.c` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows a remote attacker to bypass authentication and obtain administrative access via a forged JWT conta…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00511 Published 2026-08-19 No fix listed CWE-347