CVE-2026-51599

The CVE describes an authentication-free vulnerability in the RTSP service of MERCURY MIPC252W (v1.0.5, Build 230306 Rel.79931n). The root cause is insufficient input validation in the RTSP parser: when an RTSP request includes a Content-Length header without a corresponding body, the parser ente...