CVE Catalog
CVE-2026-19509
UnknownSummary
Improper input validation in `ajaxSet_wireless_network_configuration.jst` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows an authenticated attacker to cause denial of service via a crafted `ssid_number` parameter.
Risk Assessment
An authenticated attacker can disrupt service, potentially affecting network availability.
Recommendation
Update RDK-B WebUI to the latest version and restrict access to the admin panel.
Original NVD description (English source)
Improper input validation in `ajaxSet_wireless_network_configuration.jst` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows an authenticated attacker to cause denial of service via a crafted `ssid_number` parameter.