InfoSecBulletin Cybersecurity for mankind
A security notice has revealed serious flaws in some Dahua products. Network admins need to fix these issues fast.
The official DHCC-SA-202606-001 alert points out three major problems with different IP cameras (IPC), PTZ cameras (SD), network video recorders (NVR), and other special devices. If not fixed, these risky flaws could greatly threaten physical security networks around the world.
Dahua patches multiple critical vulnerabilities in its products
South Korea fines Coupang Record $409 mln fine for data leak
ShinyHunters claim stolen data from 100+ org via oracle PeopleSoft servers
Security Update: RoguePlanet, BitLocker Bypass, Chromium Zero-Day, and More Critical Threats Uncovered
73 Microsoft Packages Compromised in Password Stealer Attack
New Windows Defender ‘RoguePlanet’ zero-day grants SYSTEM privileges
Microsoft June Patches 200 Vulnerabilities including 3 zero days
World’s first wind power underwater data center is now live
VMware Fixed Multiple Flaws Allow Attackers to Inject Malicious Scripts
CVE-2026-50751
Check Point VPN 0-day Flaw Exploited in the Wild
First, CVE-2026-29114 exposes a sensitive certificate chain issue with a CVSS base score of 2.3. According to the advisory, “An attacker may obtain the device’s CA root certificate.” Consequently, if this CA is trusted by client systems, an attacker “could issue fraudulent certificates trusted by those clients and undermine the certificate trust chain.” This presents long-term risks for secure communications.
Additionally, there are two DoS problems that risk the ongoing access to important surveillance feeds. CVE-2026-29115 has a CVSS score of 6.9 and lets a logged-in attacker crash the system from afar. Even more concerning, CVE-2026-29116 is a serious problem with a CVSS score of 8.7, and it doesn’t need any login.
The official report says it “could let an attacker without authentication send a special packet, causing the system to restart unexpectedly and lead to a denial of service.” This means hackers can turn off your security cameras when they want.
Mitigating these Dahua product issues needs quick action from IT teams. Check your device models and build dates. For instance, many IPC and SD models made before March 26, 2026, are at high risk. Admins should update to the latest firmware using cloud upgrades or manual downloads. For all the details, check the official Dahua security notice. Protect your systems by patching now.
