CVE-2026-35901

EUVD-2026-25902 MEDIUM

Uncontrolled Resource Consumption (CWE-400)

2026-04-27 mitre

Denial Of Service

4.4

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

4.4 MEDIUM

AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

CVSS changed

Apr 27, 2026 - 20:22 NVD

4.4 (MEDIUM)

EUVD ID Assigned

Apr 27, 2026 - 19:00 euvd

EUVD-2026-25902

CVE Published

Apr 27, 2026 - 00:00 nvd

MEDIUM 4.4

DescriptionCVE.org

A handling issue in the RTSP service of the Mercury MIPC252W 1.0.5 Build 230306 Rel.79931n allows an authenticated attacker to trigger session termination by repeatedly sending SETUP requests for the same media track within a single RTSP session. This causes the server to reset the RTSP connection, leading to a denial-of-service condition.