CVE-2026-51598

—

CVSS 3.1

6.5 medium

EPSS

<1%p19

Published

Jul 9, 2026 (Jul 9, 2026)

Modified

Jul 10, 2026

Description

An input validation vulnerability in the RTSP service of MERCURY MIPC252W IP Camera v1.0.5 Build 230306 Rel.79931n) allows an unauthenticated, network-adjacent attacker to cause a denial of service via a crafted DESCRIBE request with a malformed URL in the request line.

Weakness: CWE-20
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.