CVE-2026-35901General(mercurycom / mipc252w)

LOWCVSS 4.4 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A handling issue in the RTSP service of the Mercury MIPC252W 1.0.5 Build 230306 Rel.79931n allows an authenticated attacker to trigger session termination by repeatedly sending SETUP requests for the same media track within a single RTSP session. This causes the server to reset the RTSP connection, leading to a denial-of-service condition.

mercurycom CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

Weakness type (CWE)

CWE-400

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

mipc252w
mipc252w_firmware

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
General: 2 classified signals
Peaked 1d ago at 1 mentions (2026-04-27); latest day: 1
2 total mentions across 2 days

Affected systems

Vendors

mercurycom

Products

mipc252wmipc252w_firmware

2 versions affected across 2 products

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

General

2100.0%

Referenced assets3 URLs

By indicator

Full discourse2 posts

CVE@CVEnew164d
General
CVE-2026-35901 A handling issue in the RTSP service of the Mercury MIPC252W 1.0.5 Build 230306 Rel.79931n allows an authenticated attacker to trigger session termination by repeated… https://www.cve.org/CVERecord?id=CVE-2026-35901
Post summary
The post references CVE-2026-35901, highlighting an authenticated‑user RTSP session termination issue in the Mercury MIPC252W, but provides neither a PoC, exploit code, nor evidence of active exploitation.
00010113
57.3K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds164d
General
CVE-2026-35901 Denial of Service in Mercury MIPC252W RTSP Service via Repeated SETUP Re... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-35901 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3
Post summary
The tweet merely announces CVE-2026-35901 and links to external resources, providing limited technical detail but no PoC, exploit, patch, or false‑positive information.
0000046
4.0K followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	mercurycom	mipc252w	-	-	-
OS	mercurycom	mipc252w_firmware	1.0.5	-	-

Explore more

Back to dashboard mercurycom CVEs mipc252w vulnerabilities