CVE-2026-51597
Possible ATT&CK Techniques 3AI
T1078 · Valid Accounts T1190 · Exploit Public-Facing Application T1110.004 · Credential StuffingGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-51597
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
MERCURY MIPC252W IP camera v1.0.5 Build 230306 Rel.79931n does not implement nonce expiration in RTSP Digest authentication. An adjacent network attacker can capture a legitimate authentication exchange and replay the nonce and response values in a new connection to bypass authentication without knowledge of the device credentials, gaining unauthorized access to the live video stream.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2026-51597
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-51597
请登录查看更多情报信息。
Other References for CVE-2026-51597 (1)
Same Patch Batch · n/a · 2026-07-09 · 25 CVEs total
| CVE-2026-15187 | 4.3 MEDIUM | enquirer Public Package API Enquirer.set prototype pollution |
| CVE-2026-15202 | 4.3 MEDIUM | YzmCMS Header yzmphp.php get_url cross site scripting |
| CVE-2026-15194 | 3.3 LOW | Open5GS AMF context.c amf_context_final use after free |
| CVE-2026-15185 | 3.3 LOW | GPAC MP4Box vobsub.c vobsub_read_idx out-of-bounds |
| CVE-2026-38076 | Artifex jbig2整数溢出致DoS漏洞 | |
| CVE-2026-39246 | decompress<4.2.2符号链接创建漏洞 | |
| CVE-2026-39243 | decompress <4.2.2硬链接验证缺失致文件泄露 | |
| CVE-2026-39245 | decompress <4.2.2 目录遍历与任意文件写入漏洞 | |
| CVE-2025-45422 | Proximus b-box v8c.725A 端口转发规则越权访问漏洞 | |
| CVE-2026-31267 | Mercusys MW302R V1.4.10 Web界面缓冲区溢出漏洞 | |
| CVE-2026-51923 | docuForm Client v11.11c IDOR漏洞致任意代码执行 | |
| CVE-2026-51925 | docuForm Client v11.11c LFI导致远程代码执行 | |
| CVE-2026-51926 | docuForm FSM Client v11.11c用户枚举漏洞 | |
| CVE-2026-51924 | docuForm Client v11.11c任意代码执行漏洞 | |
| CVE-2025-63579 | Kyocera多功能打印机地址簿信息泄露漏洞 | |
| CVE-2026-51602 | 腾达CP3 V3.0 RTSP栈溢出致DoS | |
| CVE-2026-51598 | 水星 MIPC252W v1.0.5 RTSP拒绝服务漏洞 | |
| CVE-2026-51599 | MERCURY MIPC252W v1.0.5 RTSP服务拒绝服务漏洞 | |
| CVE-2026-51603 | Tenda CP3 V3.0 RTSP服务栈溢出导致拒绝服务 | |
| CVE-2026-51601 | Tenda CP3 V31.1.9.91 RTSP服务栈溢出致崩溃 |
Showing top 20 of 25 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-15321
MyEMS Admin Backend svg.py on_post cross site scripting - CVE-2026-15202
YzmCMS Header yzmphp.php get_url cross site scripting - CVE-2026-15194
Open5GS AMF context.c amf_context_final use after free - CVE-2026-15187
enquirer Public Package API Enquirer.set prototype pollution - CVE-2026-15185
GPAC MP4Box vobsub.c vobsub_read_idx out-of-bounds
V. Comments for CVE-2026-51597
No comments yet