CVE-2026-51604
the affected product
A stack-based buffer overflow vulnerability in the RTSP service of Tenda CP3 V3.0 (firmware V31.1.9.91) allows an unauthenticated remote attacker to cause a denial of service via a crafted PLAY request.
- CVSS
- 7.5
- EPSS
- 0.41% 33.6% percentile
- CISA KEV
- Not listed
- Published
- 2026.07.10