CVE-2026-19509: Rdk Rdk-B Webui

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper input validation in `ajaxSet_wireless_network_configuration.jst` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows an authenticated attacker to cause denial of service via a crafted `ssid_number` parameter.

Affected products

• Rdk Rdk-B Webui

Published 2026-08-19. Last modified 2026-09-03.