CVE-2026-19509

Improper input validation in ajaxSetwirelessnetworkconfiguration.jst in RDK-B WebUI rdkb-2025q4-kirkstone.04.10.26 allows an authenticated attacker to cause denial of service via a crafted ssidnumber parameter...

CVE-2026-19508

RDK-B WebUI version rdkb-2025q4-kirkstone.04.10.26 contains a heap-based buffer overflow in the multipart form-data parser located in jst_post.c (specifically within javascript-templates/source/jst_post.c). The vulnerability arises because the data parser fails to properly validate malformed inpu...