CVE-2026-19506

A race condition in the check.jst file of RDK-B WebUI (firmware version rdkb-2025q4-kirkstone.04.10.26) allows a remote attacker to gain unauthorized access by sending concurrent authentication requests that exploit shared authentication state. No patch or workaround is documented; the issue was ...