CVE-2026-19507: RDK WebUI uncontrolled resource consumption
Published Aug 19, 2026
·Updated
Uncontrolled resource consumption in check.jst in RDK-B WebUI rdkb-2025q4-kirkstone.04.10.26 allows a remote unauthenticated attacker to cause denial of service via excessively large password values.
Affected Software
1 affected component
RDK-B WebUI=rdkb-2025q4-kirkstone.04.10.26
Event History
Aug 19, 2026
CVE Published
via MITRE·07:28 PM
Data Sourced
via MITRE·07:28 PM
DescriptionWeakness
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
The attacker can trigger the denial of service remotely without authentication by supplying an excessively large password value to the affected check.jst component.
2
Which deployment is identified as affected?
The affected software is RDK-B WebUI, specifically the rdkb-2025q4-kirkstone.04.10.26 version identified in the available data.