Report: CVE-2026-31256 - MERCURY MIPC252W Null Pointer Dereference RTSP Service Vulnerability - 2025 Update
CVE ID :CVE-2026-31256 Published : April 27, 2026, 7:16 p.m. | 41 minutes ago Description :A null pointer dereference vulnerability exists in the RTSP service of the MERCURY MIPC252W 1.0.5 Build 230306 Rel.79931n. During the processing of a SETUP request for the path rtsp://:554/stream1/track2, the device fails to properly validate the Transport header field. When this header is improperly constructed, the RTSP service can dereference a NULL pointer during request parsing. Successful exploitation causes the device to crash and automatically reboot. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...