CyberSecBulletin

Mercurycom vulnerabilities

We track 2 vulnerabilities in Mercurycom products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 27, 2026.

2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score

Latest Mercurycom vulnerabilities

  • 9.8 Critical severity

    Mipc252w Firmware: Improper Authentication

    CVE-2026-35903Mercurycom

    MERCURY MIPC252W IP camera 1.0.5 Build 230306 Rel.79931n contains an improper authentication vulnerability in the RTSP service. After successful Digest authentication in an initial DESCRIBE request, the device does not verify the Digest response parameter in s

  • 7.5 High severity

    Mipc252w Firmware: NULL Pointer Dereference

    CVE-2026-31256Mercurycom

    A null pointer dereference vulnerability exists in the RTSP service of the MERCURY MIPC252W 1.0.5 Build 230306 Rel.79931n. During the processing of a SETUP request for the path rtsp://<IP>:554/stream1/track2, the device fails to properly validate the Transport