CVE-2026-51604

A stack-based buffer overflow vulnerability in the RTSP service of Tenda CP3 V3.0 (firmware V31.1.9.91) allows an unauthenticated remote attacker to cause a denial of service via a crafted PLAY request.

Score
CVSS 3.1 7.5 High
Status
Deferred - cve@mitre.org
Published
2026-07-09
Last modified
2026-10-25
Weaknesses
CWE-121

References