CVE Catalog
CVE-2026-19506
UnknownSummary
Race condition in `check.jst` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows a remote attacker to gain unauthorized access via concurrent authentication requests that exploit shared authentication state.
Risk Assessment
An attacker can bypass authentication and gain unauthorized access to the system, potentially leading to confidentiality and integrity breaches.
Recommendation
Update RDK-B WebUI and implement synchronization mechanisms for authentication state.
Original NVD description (English source)
Race condition in `check.jst` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows a remote attacker to gain unauthorized access via concurrent authentication requests that exploit shared authentication state.