InfoSecBulletin Cybersecurity for mankind
A security notice has revealed serious flaws in some Dahua products. Network admins need to fix these issues fast.
The official DHCC-SA-202606-001 alert points out three major problems with different IP cameras (IPC), PTZ cameras (SD), network video recorders (NVR), and other special devices. If not fixed, these risky flaws could greatly threaten physical security networks around the world.
“PentesterFlow” AI Automation Tool for Penetration Testers and Bug Hunters
Jailbreak works against AI Models GPT-5.6, Claude Opus 5, and Fable, Claims Researcher
Researchers found security flaws in every script generated by ChatGPT, Copilot, and Gemini
Australian Energy Giant Origin confirms unauthorized access and disclosure of customer data
Anthropic Unveils Claude Security Plugin for Code Flaw Scanning
Apple, ASUS Router, Meta, Windmill & Ubuntu Patch Critical Security Flaws
SolarWinds Patches 15 Critical Serv-U Flaws
Oracle fixes 1,400+ vulnerabilities; critical flaws threaten enterprise servers
Zimbra Patches 4 XSS and Critical SNMP Command Injection Flaws
Qilin ransomware gang exploiting critical Palo Alto VPN Flaw
First, CVE-2026-29114 exposes a sensitive certificate chain issue with a CVSS base score of 2.3. According to the advisory, “An attacker may obtain the device’s CA root certificate.” Consequently, if this CA is trusted by client systems, an attacker “could issue fraudulent certificates trusted by those clients and undermine the certificate trust chain.” This presents long-term risks for secure communications.
Additionally, there are two DoS problems that risk the ongoing access to important surveillance feeds. CVE-2026-29115 has a CVSS score of 6.9 and lets a logged-in attacker crash the system from afar. Even more concerning, CVE-2026-29116 is a serious problem with a CVSS score of 8.7, and it doesn’t need any login.
The official report says it “could let an attacker without authentication send a special packet, causing the system to restart unexpectedly and lead to a denial of service.” This means hackers can turn off your security cameras when they want.
Mitigating these Dahua product issues needs quick action from IT teams. Check your device models and build dates. For instance, many IPC and SD models made before March 26, 2026, are at high risk. Admins should update to the latest firmware using cloud upgrades or manual downloads. For all the details, check the official Dahua security notice. Protect your systems by patching now.
