CVE-2026-51602

Name of the Vulnerable Software and Affected Versions Tenda CP3 V3.0 version V31.1.9.91

Description A stack-based buffer overflow occurs in the RTSP service when the second-stage URL routing parser fails to validate the length of the URL field in a SETUP request. An unauthenticated remote attacker can trigger this by sending a URL containing exactly four consecutive repetitions of a valid RTSP URL, bypassing first-stage format validation. This results in a crash of the RTSP service process, causing a denial of service that makes the device inaccessible to all clients on the local network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.