What is the CVSS score of CVE-2026-51606?

CVE-2026-51606 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.3%.

Which versions of N A are affected by CVE-2026-51606?

Tenda CP3 V3.0 IP cameras running firmware V31.1.9.91 are vulnerable to remote denial-of-service attacks that abruptly disconnect video streams without requiring authentication, potentially creating…

How to fix or mitigate CVE-2026-51606?

Within 24 hours: Inventory all Tenda CP3 V3.0 units running firmware V31.1.9.91 and document which monitor critical areas. Within 7 days: Isolate affected cameras on a dedicated VLAN; implement firewall rules restricting RTSP port 554 access to trusted administrative networks only; deploy rate limiting on RTSP traffic. Within 30 days: Check Tenda vendor advisory for patch availability and firmware update timeline; prioritize replacement of cameras in security-critical locations; evaluate alternative IP camera products with active patch support.

N A CVE-2026-51606

EUVD-2026-42649 HIGH

Improper Input Validation (CWE-20)

2026-07-09 mitre

GHSA-4gxm-xgrj-8mg2

Tenda Information Disclosure N A

7.5

CVSS 3.1 · Vendor: mitre

Severity by source

Vendor (mitre) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from Vendor (mitre) · only source for this CVE.

CVSS VectorVendor: mitre

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 09, 2026 - 18:51 vuln.today

CVSS changed

Jul 09, 2026 - 18:22 NVD

7.5 (HIGH)

CVE Published

Jul 09, 2026 - 00:00 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

An improper input handling vulnerability in the RTSP service of Tenda CP3 V3.0 (firmware V31.1.9.91) causes the device to abruptly terminate the TCP connection with a RST packet when a request containing an oversized field value is received, without returning any RFC 2326-compliant error response. This behavior affects the request-line URL field and header field values across multiple RTSP request types.

AnalysisAI

Denial-of-service in the RTSP service of the Tenda CP3 V3.0 IP camera (firmware V31.1.9.91) lets remote unauthenticated attackers abruptly reset the streaming TCP connection by sending an RTSP request with an oversized field value. Rather than replying with an RFC 2326-compliant error, the service tears the connection down with a RST packet, indicating unsafe input handling in the RTSP parser that can disrupt video streaming. A public research report documenting the flaw exists on GitHub, but there is no CISA KEV listing and no confirmed active exploitation.