Vendor
Dahua
28 known vulnerabilities.
Dahua at a glance
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 1 | 1 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 3 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 1 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 1 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 2 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 1 | 0 |
| Dec 2024 | 0 | 0 |
Products
Latest advisories
-
High
Dahua ASI7213X-T1 (Update A)
Successful exploitation of these vulnerabilities could allow unauthorized access, upload malicious files, and cause a denial-of-service condition.
first Jul 12, 2022 -
CriticalICSA-17-124-02 2 CVEs
Dahua Technology Co., Ltd Digital Video Recorders and IP Cameras
ATTENTION: Remotely exploitable/low skill level to exploit. Public exploits are available.
28 results · Feed
-
Critical 9.8
Dahua Intelligent Connection Center command injection
A vulnerability has been found in the Dahua Intelligent Connection Center. A remote attacker could send a specially crafted request to the affected system, allowing the attacker to execute arbitrary commands, resulting in remote code execution.
-
High 8.7CVE-2026-29116 Public exploit
A vulnerability has been found in some Dahua products could allow an unauthenticated remote attacker to send a speciall…
-
Medium 6.9CVE-2026-29115 Public exploit
A vulnerability has been found in some Dahua products could allow an authenticated remote attacker to send a specially …
-
Low 2.3CVE-2026-29114 Public exploit
A vulnerability has been found in some Dahua products. An attacker may obtain the device’s CA root certificate. If that…
-
Low 2.4
A vulnerability found in Dahua NVR/XVR device. A third-party malicious attacker with physical access to the device may …
-
Medium 6.8CVE-2025-31702 Public exploit
A vulnerability exists in certain Dahua embedded products. Third-party malicious attacker with obtained normal user cre…
-
High 8.1
A vulnerability has been found in Dahua products. Attackers could exploit a buffer overflow vulnerability by sending sp…
-
High 8.1CVE-2025-31700 Public exploit
A vulnerability has been found in Dahua products. Attackers could exploit a buffer overflow vulnerability by sending sp…
-
Medium 4.3
Dahua IPC-HFW1200S Web Interface Sha1Account1 path traversal
A vulnerability was found in Dahua IPC-HFW1200S, IPC-HFW2300R-Z, IPC-HFW5220E-Z and IPC-HDW1200S up to 20241222. It has been rated as problematic. Affected by this issue is some unknown functionality of the file ../mtd/Config/Sha1Account1 of the component Web…
-
High 8.6
A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface wi…
-
High 7.5
A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface wi…
-
High 7.5
A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface wi…
-
Medium 6.5
A vulnerability has been found in Dahua products.After obtaining the ordinary user's username and password, the attacke…
-
Medium 6.0
A vulnerability has been found in Dahua products.After obtaining the administrator's username and password, the attacke…
-
Medium 4.9
A vulnerability has been found in Dahua products. After obtaining the administrator's username and password, the attac…
-
High 7.5
A vulnerability has been found in Dahua products.Attackers can send carefully crafted data packets to the interface wit…
-
Medium 6.3
Dahua Smart Park Management unrestricted upload
A vulnerability classified as critical was found in Dahua Smart Park Management up to 20230713. This vulnerability affects unknown code of the file /emap/devicePoint_addImgIco?hasSubsystem=true. The manipulation of the argument upload leads to unrestricted up…
-
Low 3.5
Dahua Smart Parking Management image server-side request forgery
A vulnerability has been found in Dahua Smart Parking Management up to 20230528 and classified as problematic. This vulnerability affects unknown code of the file /ipms/imageConvert/image. The manipulation of the argument fileUrl leads to server-side request …
-
Unscored —
The specific fields of CGI interface of some Dahua products are not strictly verified, an attacker can cause a buffer o…
-
Unscored —
Some Dahua products have the problem of denial of service during the login process. An attacker can cause a device cras…
-
Unscored —
Some Dahua products have information leakage issues. Attackers can obtain the IP address and device model information o…
-
Unscored —
Some of Dahua's Debug functions do not have permission separation. Low-privileged users can use the Debug function afte…
-
Unscored —
Online upgrade information in some firmware packages of Dahua products is not encrypted. Attackers can obtain this info…
-
Unscored —
Dahua IP camera products using firmware versions prior to V2.400.0000.14.R.20170713 include a version of the Sonia web interface that may be vulnerable to a stack buffer overflow
Dahua IP camera products using firmware versions prior to V2.400.0000.14.R.20170713 include a version of the Sonia web interface that may be vulnerable to a stack buffer overflow. Dahua IP camera products include an application known as Sonia (/usr/bin/sonia)…
-
Unscored —
Privilege escalation vulnerability found in some Dahua IP devices. Attacker in possession of low privilege account can …
-
Unscored —
Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary pass…
-
Unscored —
Firmware upgrade authentication bypass vulnerability was found in Dahua IPC-HDW4300S and some IP products. The vulnerab…
-
Unscored —
Authentication vulnerability found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with software before DH_NVR5x…