Login Request a demo
Low severity · published Jun 10, 2026
CVE-2026-29114
A vulnerability has been found in some Dahua products
2.3
CVSS
0.2%
EPSS
No
On KEV
Description
A vulnerability has been found in some Dahua products. An attacker may obtain the device’s CA root certificate. If that CA is installed and trusted on client systems, the attacker could issue fraudulent certificates trusted by those clients and undermine the certificate trust chain.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 9% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IP
IPC · Dahua
Some IPC models are affected, specifically those with a build date before April 15, 2026. · source: vendor
Affected product
IP
IPC
Dahua
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-29114
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-29114
www.dahuasecurity.com
https://www.dahuasecurity.com/about-dahua/trust-center/dahua-psirt/dhcc-sa-202606-001:-security-advisory-%E2%80%93-vulnerabilities-found-in-some-dahua-products