CVE-2026-29114

LOW

Dahua Ipc - Insertion of Sensitive Information into Externally-Accessible File or Directory

Title source: rule

Exploitation Summary

EIP tracks 1 public exploit for CVE-2026-29114. PoCs published by CrimsonfiedOfficial.

AI-analyzed exploit summary Detailed technical analysis of CVE-2026-29114, a low-severity certificate-trust vulnerability in Dahua IPC models where the device's internal CA root certificate can be remotely obtained. The writeup covers root cause (CWE-538), attack prerequisites, CVSS scoring, and mitigation steps, emphasizing PKI trust abuse risks if the CA is trusted on client systems.

Description

A vulnerability has been found in some Dahua products. An attacker may obtain the device’s CA root certificate. If that CA is installed and trusted on client systems, the attacker could issue fraudulent certificates trusted by those clients and undermine the certificate trust chain.

Exploits (1)

nomisec WRITEUP

by CrimsonfiedOfficial · poc

https://github.com/CrimsonfiedOfficial/CVE-2026-29114

View Code ZIP pw:eip

Detailed technical analysis of CVE-2026-29114, a low-severity certificate-trust vulnerability in Dahua IPC models where the device's internal CA root certificate can be remotely obtained. The writeup covers root cause (CWE-538), attack prerequisites, CVSS scoring, and mitigation steps, emphasizing PKI trust abuse risks if the CA is trusted on client systems.

Classification

Writeup 99%

Attack Type

Info Leak

Complexity

Moderate

Reliability

Theoretical

Target: Dahua IPC (IP camera) models with firmware builds before April 15, 2026

No auth needed

Prerequisites: Network access to the vulnerable IPC device · Device CA root certificate installed/trusted on client systems · TLS sessions relying on the compromised trust anchor

MITRE ATT&CK

T1005 - Data from Local System T1552 - Unsecured Credentials

mistral-large-3 · analyzed Jul 11, 2026 Full analysis →

References (1)

Core 1

Core References

https://www.dahuasecurity.com/about-dahua/trust-center/dahua-psirt/dhcc-sa-202606-001:-security-advisory-%E2%80%93-vulnerabilities-found-in-some-dahua-products

Scores

CVSS v4 2.3

EPSS 0.0019

EPSS Percentile 8.9%

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-538

Status published

Products (1)

Dahua/IPC Some IPC models are affected, specifically those with a build date before April 15, 2026.

Published Jun 10, 2026

Tracked Since Jun 10, 2026