CVE-2026-19507

CVE-2026-19507 affects the RDK-B WebUI (version rdkb-2025q4-kirkstone.04.10.26), an open-source web-based management interface for broadband gateways. The login handler in /usr/www2/check.jst does not limit password length before computing a SHA-256 hash on the entire submitted value. A remote, u...