CVE-2026-51598

An input validation vulnerability in the RTSP service of MERCURY MIPC252W IP Camera v1.0.5 Build 230306 Rel.79931n) allows an unauthenticated, network-adjacent attacker to cause a denial of service via a crafted DESCRIBE request with a malformed URL in the request line.

Score
CVSS 3.1 6.5 Medium
Status
Deferred - cve@mitre.org
Published
2026-07-09
Last modified
2026-10-25
Weaknesses
CWE-20

References