CVE-2026-29114CWE-538

A vulnerability has been found in some Dahua products

Low · published June 10, 2026

CVSS v4.0
2.3
EPSS
0%
Percentile
18.3
In the wild
Unconfirmed
What it is

A vulnerability has been found in some Dahua products. An attacker

may obtain the device’s CA root certificate. If that CA is installed and

trusted on client systems, the attacker could issue fraudulent certificates

trusted by those clients and undermine the certificate trust chain.

The record
Technical detail
CVSS v4.0
2.3 · LOW
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00271 · 18.3th percentile
Weakness
CWE-538 · Insertion of Sensitive Information into Externally-Accessible File or Directory
Published
2026-06-10T05:44Z
EPSS history
Timeline
  • 10 JUN 05:44Z
    A vulnerability has been found in some Dahua products
    cvelistv5