CVE-2026-51605

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

A stack-based buffer overflow vulnerability in the RTSP service of Tenda CP3 V3.0 (firmware V31.1.9.991) allows an unauthenticated remote attacker to cause a denial of service via a crafted TEARDOWN request.

Published 2026-07-09. Last modified 2026-07-10.