VULNERABILITY INTELLIGENCE

CVE-2026-29114

EPSS probability0.19%
CISA KEVNot currently listed
Published2026-06-10
Last modified2026-07-23

Description

A vulnerability has been found in some Dahua products. An attacker may obtain the device’s CA root certificate. If that CA is installed and trusted on client systems, the attacker could issue fraudulent certificates trusted by those clients and undermine the certificate trust chain.

Weakness classification

  • cybersecurity@dahuatech.com: CWE-538

Primary references