What is GHSA-j328-w5qv-gh82?

GHSA-j328-w5qv-gh82 is a security advisory published by GitHub Security Advisories with unknown severity. Improper cryptographic signature verification in `jst_functions.c` in RDK-B WebUI `rdkb-2025q4...

Which CVE IDs does GHSA-j328-w5qv-gh82 cover?

GHSA-j328-w5qv-gh82 covers the following CVE IDs: CVE-2026-19505. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-j328-w5qv-gh82unknown

Improper cryptographic signature verification in `jst_functions.c` in RDK-B WebUI `rdkb-2025q4...

Vendor

GitHub Security Advisories

Published

August 19, 2026

Last Modified

August 19, 2026

🔗 CVE IDs covered (1)

CVE-2026-19505 →

📋 Description

Improper cryptographic signature verification in jst_functions.c in RDK-B WebUI rdkb-2025q4-kirkstone.04.10.26 allows a remote attacker to bypass authentication and obtain administrative access via a forged JWT containing an invalid RSA signature.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-19505
https://developer.rdkcentral.com/documentation/documentation/rdk_broadband_documentation/components/webui
https://whitehats.pwr.edu.pl//blog/2026-08-19-multiple-vulnerabilities-in-rdkb
https://github.com/advisories/GHSA-j328-w5qv-gh82