https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-35903.htmlhttps://patchthecve.com/cve/CVE-2026-35903.htmlWed, 17 Jun 2026 10:41:02 +0000CRITICAL 9.8: MERCURY MIPC252W IP camera 1.0.5 Build 230306 Rel.79931n contains an improper authentication vulnerability in the RTSP service. After successful Digest authentication in an initial DESCRIBE request, the device does not verify the Digest response parameter in subsequent RTSP requests within the same https://patchthecve.com/cve/CVE-2026-35902.htmlhttps://patchthecve.com/cve/CVE-2026-35902.htmlWed, 17 Jun 2026 10:41:01 +0000MEDIUM 6.2: The RTSP service of MERCURY IP camera MIPC252W 1.0.5 Build 230306 has an issue handling failed Digest authentication attempts. By repeatedly sending RTSP requests with invalid authentication parameters, an unauthenticated attacker can cause the RTSP service to enter a persistent authentication failuhttps://patchthecve.com/cve/CVE-2026-35901.htmlhttps://patchthecve.com/cve/CVE-2026-35901.htmlWed, 17 Jun 2026 10:41:01 +0000MEDIUM 4.4: A handling issue in the RTSP service of the Mercury MIPC252W 1.0.5 Build 230306 Rel.79931n allows an authenticated attacker to trigger session termination by repeatedly sending SETUP requests for the same media track within a single RTSP session. This causes the server to reset the RTSP connection, https://patchthecve.com/cve/CVE-2026-31256.htmlhttps://patchthecve.com/cve/CVE-2026-31256.htmlWed, 17 Jun 2026 10:33:33 +0000HIGH 7.5: A null pointer dereference vulnerability exists in the RTSP service of the MERCURY MIPC252W 1.0.5 Build 230306 Rel.79931n. During the processing of a SETUP request for the path rtsp://<IP>:554/stream1/track2, the device fails to properly validate the Transport header field. When this header is impro