CVE-2026-51598
Medium
Description
An input validation vulnerability in the RTSP service of MERCURY MIPC252W IP Camera v1.0.5 Build 230306 Rel.79931n) allows an unauthenticated, network-adjacent attacker to cause a denial of service via a crafted DESCRIBE request with a malformed URL in the request line.
SeverityMedium
CVSS6.5
Exploit probability—
ProductMIPC252W IP Camera
PublishedJul 9, 2026
First seenJul 9, 2026
Weakness typeCWE-20Improper input validation
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| MERCURY MIPC252W IP Camera | 1.0.5 Build 230306 Rel.79931n | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.