Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A null pointer dereference vulnerability exists in the RTSP service of the MERCURY MIPC252W 1.0.5 Build 230306 Rel.79931n. During the processing of a SETUP request for the path rtsp://<IP>:554/stream1/track2, the device fails to properly validate the Transport header field. When this header is improperly constructed, the RTSP service can dereference a NULL pointer during request parsing. Successful exploitation causes the device to crash and automatically reboot.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
CVE-2026-31256 A null pointer dereference vulnerability exists in the RTSP service of the MERCURY MIPC252W 1.0.5 Build 230306 Rel.79931n. During the processing of a SETUP request fo… https://www.cve.org/CVERecord?id=CVE-2026-31256
Post summary
This entry reports a null pointer dereference vulnerability in the RTSP service of the MERCURY MIPC252W, but contains no information about exploits, patch status, or false positives.
CVE-2026-31256 Null Pointer Dereference in MERCURY MIPC252W RTSP Service... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-31256 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
The tweet announces CVE-2026-31256, noting it as a null pointer dereference in a specific RTSP service, and directs readers to a vulnerability detail page, but provides no exploit details, patch information, or evidence of active exploitation.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | mercurycom | mipc252w | - | - | - |
| OS | mercurycom | mipc252w_firmware | 1.0.5 | - | - |