What is GHSA-gcr9-cjhj-rh79?

GHSA-gcr9-cjhj-rh79 is a security advisory published by GitHub Security Advisories with unknown severity. Race condition in `check.jst` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows a remote...

Which CVE IDs does GHSA-gcr9-cjhj-rh79 cover?

GHSA-gcr9-cjhj-rh79 covers the following CVE IDs: CVE-2026-19506. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-gcr9-cjhj-rh79unknown

Race condition in `check.jst` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows a remote...

Vendor

GitHub Security Advisories

Published

August 19, 2026

Last Modified

August 19, 2026

🔗 CVE IDs covered (1)

CVE-2026-19506 →

📋 Description

Race condition in check.jst in RDK-B WebUI rdkb-2025q4-kirkstone.04.10.26 allows a remote attacker to gain unauthorized access via concurrent authentication requests that exploit shared authentication state.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-19506
https://developer.rdkcentral.com/documentation/documentation/rdk_broadband_documentation/components/webui
https://whitehats.pwr.edu.pl//blog/2026-08-19-multiple-vulnerabilities-in-rdkb
https://github.com/advisories/GHSA-gcr9-cjhj-rh79