CVE-2026-29114lowCWE-538

CVE-2026-29114: low-severity vulnerability in Dahua IPC

Published

Follow this CVE+ Monitor IPC

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 2.3epss 0.2%
from disclosure to weapon31 days
Published on NVDJun 10
1st PoC+31d
A vulnerability has been found in some Dahua products. An attacker may obtain the device’s CA root certificate. If that CA is installed and trusted on client systems, the attacker could issue fraudulent certificates trusted by those clients and undermine the certificate trust chain.
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Affected products
Dahua · IPC
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Dahua IPC

In the same product, most dangerous first.

CVE-2025-31700HIGHCVE-2025-31700EPSS 1.1%CVE-2025-31701HIGHCVE-2025-31701EPSS 0.9%CVE-2025-31702MEDIUMCVE-2025-31702EPSS 0.5%