CVE-2026-51598 | THREATINT

Description

An input validation vulnerability in the RTSP service of MERCURY MIPC252W IP Camera v1.0.5 Build 230306 Rel.79931n) allows an unauthenticated, network-adjacent attacker to cause a denial of service via a crafted DESCRIBE request with a malformed URL in the request line.

PUBLISHED Reserved 2026-06-08 | Published 2026-07-09 | Updated 2026-07-09 | Assigner mitre

References

github.com/...ERCURY_MIPC252W/MERCURY_MIPC252W_6th/README.md exploit

github.com/...ERCURY_MIPC252W/MERCURY_MIPC252W_6th/README.md

cve.org (CVE-2026-51598)

nvd.nist.gov (CVE-2026-51598)

Download JSON