CVE-2026-51606
Last modified
CVE-2026-51606 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. An improper input handling vulnerability in the RTSP service of Tenda CP3 V3.0 (firmware V31.1.9.91) causes the device to abruptly terminate the TCP connection with a RST packet when a request containing an oversized field value is received, without returning any RFC 2326-compliant error response. This behavior affects the request-line URL field and header field values across multiple RTSP request types.. EPSS estimates a 0.32% chance of exploitation in the next 30 days.
Description
An improper input handling vulnerability in the RTSP service of Tenda CP3 V3.0 (firmware V31.1.9.91) causes the device to abruptly terminate the TCP connection with a RST packet when a request containing an oversized field value is received, without returning any RFC 2326-compliant error response. This behavior affects the request-line URL field and header field values across multiple RTSP request types.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| — | — | n/a |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-51606?
How severe is CVE-2026-51606?
How do I fix CVE-2026-51606?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-51600Tenda CP3 V3.0 firmware V31.1.9.91 does not validate the Con…7.5
- CVE-2026-51601Tenda CP3 V3.0 firmware V31.1.9.91 contains a stack-based bu…7.5
- CVE-2026-51602A stack-based buffer overflow vulnerability in the RTSP serv…7.5
- CVE-2026-51603A stack-based buffer overflow vulnerability in the RTSP serv…7.5
- CVE-2026-51604A stack-based buffer overflow vulnerability in the RTSP serv…7.5
- CVE-2026-51605A stack-based buffer overflow vulnerability in the RTSP serv…7.5
- CVE-2026-5161Improper link resolution before file access ('link following…8.8
- CVE-2026-5162The Royal Addons for Elementor plugin for WordPress is vulne…6.4
- CVE-2026-5163Mattermost versions 11.5.x <= 11.5.1 fail to verify channel …6.5
- CVE-2026-5164A flaw was found in virtio-win. The `RhelDoUnMap()` function…5.5
- CVE-2026-5165A flaw was found in virtio-win, specifically within the Virt…7.8
- CVE-2026-5166Improper Limitation of a Pathname to a Restricted Directory …9.6
Are you affected by CVE-2026-51606?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST