CVE-2026-35903 - Vulnerability Analysis

Overview

MERCURY MIPC252W IP camera 1.0.5 Build 230306 Rel.79931n contains an improper authentication vulnerability in the RTSP service caused by lack of verification of Digest response in subsequent requests, letting attackers with network access issue unauthorized RTSP commands by reusing session parameters, exploit requires network access to a previously authenticated session.

Severity & Score

Impact

Attackers can issue unauthorized RTSP control commands, potentially allowing control over the device's streaming functions.

Mitigation

Update to the latest firmware version that patches this vulnerability.

References

• https://github.com/izxnfirh8148/CVE_REQUESTS_references/blob/main/MERCURY_MIPC252W/MERCURY_MIPC252W_4th/README.md

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner