Vulnerability Intelligence Report
CVE-2026-29114
A vulnerability has been found in some Dahua products. An attacker may obtain the device’s CA root certificate. If that CA is installed and trusted on client systems, the attacker could issue fraudulent certificates trusted by those clients and undermine the certificate trust chain.
No Active Exploit Signals
CVSS Base Score
2.3
LOW
EPSS Probability:0.19%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-538 ↗CWE-538 Insertion of sensitive information into Externally-Accessible file or directory
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Dahua | IPC | Some IPC models are affected, specifically those with a build date before April 15, 2026. (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.190%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Dahua Technologies · Vendor · China |
| Reserved | 2026-03-04T03:32:28 |
| Published | 2026-06-10T05:44:50 |
| Last Updated | 2026-06-10T14:59:30 |
Community Chatter & Buzz