CVE-2026-29116
HighCVSS 8.7Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
Some Dahua products have a vulnerability allowing an unauthenticated remote attacker to send a crafted packet, triggering an exception causing unexpected system reboot, leading to denial of service.
Risk Assessment
Risk involves potential disruption of Dahua surveillance systems, leading to loss of monitoring continuity and physical security.
Recommendation
Apply security patches provided by Dahua and monitor network traffic for suspicious packets.
Other vulnerabilities in Dahua products
See all- CVE-2026-29115Medium
Vulnerability in Dahua products allows an authenticated remote attacker to send a crafted packet, causing an exception and unexpected system reboot, leading to denial of service.
- CVE-2026-29114Low
A vulnerability in some Dahua products allows an attacker to obtain the device's CA root certificate. If that CA is installed and trusted on client systems, the attacker can issue fraudulent certificates, undermining the certificate trust chain.
Original NVD description (English source)
A vulnerability has been found in some Dahua products could allow an unauthenticated remote attacker to send a specially crafted packet, triggering an exception that causes the system to reboot unexpectedly, resulting in a denial of service.