Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The RTSP service of MERCURY IP camera MIPC252W 1.0.5 Build 230306 has an issue handling failed Digest authentication attempts. By repeatedly sending RTSP requests with invalid authentication parameters, an unauthenticated attacker can cause the RTSP service to enter a persistent authentication failure state, preventing legitimate clients from authenticating and leading to a denial of service.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
CVE-2026-35902 The RTSP service of MERCURY IP camera MIPC252W 1.0.5 Build 230306 has an issue handling failed Digest authentication attempts. By repeatedly sending RTSP requests wit… https://www.cve.org/CVERecord?id=CVE-2026-35902
Post summary
A new vulnerability (CVE-2026-35902) has been disclosed concerning the RTSP service of MERCURY IP cameras, highlighting flawed handling of failed Digest authentication attempts.
CVE-2026-35902 Denial of Service in MERCURY IP Camera MIPC252W via RTSP Authentication Failure https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-35902
Post summary
The post announces CVE-2026-35902, a denial‑of‑service vulnerability in MERCURY IP Camera MIPC252W triggered by RTSP authentication failure, and links to a detailed vulnerability page.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | mercurycom | mipc252w | - | - | - |
| OS | mercurycom | mipc252w_firmware | 1.0.5 | - | - |