CVE-2026-51599

Name of the Vulnerable Software and Affected Versions MERCURY MIPC252W version 1.0.5 Build 230306 Rel.79931n

Description Insufficient input validation in the RTSP service allows an unauthenticated remote attacker to make an individual TCP connection temporarily unusable. By sending an RTSP request containing a Content-Length header without a corresponding message body, the RTSP parser enters a body-waiting state. This causes the system to silently consume all subsequent data on the connection as body content until a server-side timeout occurs and closes the connection.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.