Skip to content
OpenAdvisories
Critical · 9.8 CVE-2025-31704 EUVD-2025-211216GHSA-9248-6x5c-955r

Dahua Intelligent Connection Center command injection

Published Oct 30, 2026 · Updated Oct 30, 2026 · Assigned by dahua

Description

A vulnerability has been found in the Dahua Intelligent Connection Center. A remote attacker could send a specially crafted request to the affected system, allowing the attacker to execute arbitrary commands, resulting in remote code execution.

Affected products

VendorProductAffectedFixed
Dahua Intelligent Connection Center V1.000.0000000.1 – ≤ 1.000.0000005.0, V5.000.0000000.6 – < V5.000.0000000.15 V5.000.0000000.15

References