Dahua
7 CVEs tracked since 2024. Since Jul 2024, none of them reached CISA KEV.
Dahua CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2024-07 | 7 | 0 |
Products
The products that kept showing up in Dahua's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Dahua.
- CVE-2026-29116A vulnerability has been found in some Dahua products could allow an unauthenticated remote attacker to send a specially crafted packet, triggering an exception that causes the system to reboot une...7.5
- CVE-2026-29115A vulnerability has been found in some Dahua products could allow an authenticated remote attacker to send a specially crafted packet, triggering an exception that causes the system to reboot unexp...—
- CVE-2026-29114A vulnerability has been found in some Dahua products. An attacker may obtain the device’s CA root certificate. If that CA is installed and trusted on client systems, the attacker could issue fra...—
- CVE-2025-31703A vulnerability found in Dahua NVR/XVR device. A third-party malicious attacker with physical access to the device may gain access to a restricted shell via the serial port, and bypasses the shell'...—
- CVE-2025-31702A vulnerability exists in certain Dahua embedded products. Third-party malicious attacker with obtained normal user credentials could exploit the vulnerability to access certain data which are rest...6.8
- CVE-2025-31701A vulnerability has been found in Dahua products. Attackers could exploit a buffer overflow vulnerability by sending specially crafted malicious packets, potentially causing service disruption (e....8.1
- CVE-2025-31700A vulnerability has been found in Dahua products. Attackers could exploit a buffer overflow vulnerability by sending specially crafted malicious packets, potentially causing service disruption (e....8.1
- CVE-2024-13130Dahua IPC-HFW1200S Web Interface Sha1Account1 path traversal4.3
- CVE-2024-39950A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities to initiate device initialization.8.6
- CVE-2024-39949A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash.7.5
- CVE-2024-39948A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash.7.5
- CVE-2024-39947A vulnerability has been found in Dahua products.After obtaining the ordinary user's username and password, the attacker can send a carefully crafted data packet to the interface with vulnerabiliti...6.5
- CVE-2024-39946A vulnerability has been found in Dahua products.After obtaining the administrator's username and password, the attacker can send a carefully crafted data packet to the interface with vulnerabiliti...6.0
- CVE-2024-39945A vulnerability has been found in Dahua products. After obtaining the administrator's username and password, the attacker can send a carefully crafted data packet to the interface with vulnerabi...4.9
- CVE-2024-39944A vulnerability has been found in Dahua products.Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash.7.5
The record
- Peak rank
- #99 in Jul 2024
- Busiest month shown
- Jul 2024, 7 CVEs
- Months with a KEV entry
- 0 since Jul 2024
- Monthly snapshots
- 1 since 2024