InfoSecBulletin Cybersecurity for mankind
A security notice has revealed serious flaws in some Dahua products. Network admins need to fix these issues fast.
The official DHCC-SA-202606-001 alert points out three major problems with different IP cameras (IPC), PTZ cameras (SD), network video recorders (NVR), and other special devices. If not fixed, these risky flaws could greatly threaten physical security networks around the world.
Japan banking crisis
Outage causes disruption at 128 japan banks: preventing ATM transaction
Daily Cyber security update for 06.11. 2026
Cyber attack causes French bank Credit Mutuel Arkea €100 million missing
OpenAI AI Pipeline Discovers 948 Linux Kernel Privilege Escalation Flaws in 30 Hours
Bangladeshi Researcher Rasel Earns First Apple CVE Recognition for Model I/O Flaw
WinRAR, WordPress RCE flaw & Zyxel GS1900 Zero-Day exploited in the wild
Daily Cyber security update for 04.11. 2026
Daily Cyber security update for 03.11. 2026
Using ARTEX AI, Hacker to attack 200 Organizations Across 14 Countries
Amadeus cyber incident impacted “Cathay Pacific, Qantas, Japan, Malaysia, Korean & Asiana” Airlines
First, CVE-2026-29114 exposes a sensitive certificate chain issue with a CVSS base score of 2.3. According to the advisory, “An attacker may obtain the device’s CA root certificate.” Consequently, if this CA is trusted by client systems, an attacker “could issue fraudulent certificates trusted by those clients and undermine the certificate trust chain.” This presents long-term risks for secure communications.
Additionally, there are two DoS problems that risk the ongoing access to important surveillance feeds. CVE-2026-29115 has a CVSS score of 6.9 and lets a logged-in attacker crash the system from afar. Even more concerning, CVE-2026-29116 is a serious problem with a CVSS score of 8.7, and it doesn’t need any login.
The official report says it “could let an attacker without authentication send a special packet, causing the system to restart unexpectedly and lead to a denial of service.” This means hackers can turn off your security cameras when they want.
Mitigating these Dahua product issues needs quick action from IT teams. Check your device models and build dates. For instance, many IPC and SD models made before March 26, 2026, are at high risk. Admins should update to the latest firmware using cloud upgrades or manual downloads. For all the details, check the official Dahua security notice. Protect your systems by patching now.
