CVE-2026-29114

State: Published
Severity: 2.3 Low
Published: Jun 10, 2026
Updated: Jun 10, 2026
Reserved: Mar 4, 2026

Description

A vulnerability has been found in some Dahua products. An attacker may obtain the device’s CA root certificate. If that CA is installed and trusted on client systems, the attacker could issue fraudulent certificates trusted by those clients and undermine the certificate trust chain.

Scores

CVSS	Score	Vector	Source
4.0	2.3 Low	CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N	dahua

Weaknesses

CWE-538 Insertion of sensitive information into Externally-Accessible file or directory

Affected Products

Product	Versions
IPCDahua	Some IPC models are affected, specifically those with a build date before April 15, 2026.Affected

References

https://www.dahuasecurity.com/about-dahua/trust-center/dahua-psirt/dhcc-sa-202606-001:-security-advisory-%E2%80%93-vulnerabilities-found-in-some-dahua-products

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.