CVE-2026-51606

Name of the Vulnerable Software and Affected Versions Tenda CP3 version V31.1.9.91

Description Improper input handling in the RTSP service causes the device to abruptly terminate the TCP connection with a RST packet when a request containing an oversized field value is received. This occurs without returning an RFC 2326-compliant error response and affects the request-line URL field and header field values across multiple RTSP request types.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.