CVE-2026-29116 Details
Description
A vulnerability has been found in some Dahua products could allow an unauthenticated remote attacker to send a specially crafted packet, triggering an exception that causes the system to reboot unexpectedly, resulting in a denial of service.
A denial-of-service vulnerability has been identified in certain Dahua products, including IPC, SD, NVR, XVR, EVS, VTO, VTH, ASI, and TPC. This vulnerability allows an unauthenticated remote attacker to send a specially crafted packet that triggers an exception, causing the system to reboot unexpectedly and disrupt normal operation. Affected versions are those built prior to March 26, 2026.
Users can download the corresponding fix software or update to the latest version of the product from the Dahua Official website or contact local Dahua technical support for assistance. For products with cloud upgrade capabilities, the repaired version can be obtained through cloud upgrade.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jun 10, 2026CISA-ADP
Assessed Jun 10, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.dahuasecurity.com/about-dahua/trust-center/dahua-psirt/dhcc-sa-202606-001:-security-advisory-%E2%80%93-vulnerabilities-found-in-some-dahua-products | [email protected] | AdvisoryBundleRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-617 | Reachable Assertion | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Dahua IPC | < 2026-04-15 |
CPE
Remediation
| |
| Dahua SD | < 2026-03-26 |
CPE
Remediation
| |
| Dahua NVR | < 2026-03-26 |
CPE
Remediation
| |
| Dahua XVR | < 2026-03-26 |
CPE
Remediation
| |
| Dahua EVS | < 2026-03-26 |
CPE
Remediation
| |
| Dahua VTO | < 2026-03-26 |
CPE
Remediation
| |
| Dahua VTH | < 2026-03-26 |
CPE
Remediation
| |
| Dahua ASI | < 2026-03-26 |
CPE
Remediation
| |
| Dahua TPC | < 2026-03-26 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 23, 2026 | CVE Translated | [email protected] |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 10, 2026 | New CVE Received | [email protected] |
Volerion