InfoSecBulletin Cybersecurity for mankind
A security notice has revealed serious flaws in some Dahua products. Network admins need to fix these issues fast.
The official DHCC-SA-202606-001 alert points out three major problems with different IP cameras (IPC), PTZ cameras (SD), network video recorders (NVR), and other special devices. If not fixed, these risky flaws could greatly threaten physical security networks around the world.
Hackers Exploiting MikroTik RouterOS Flaw Gaining Network Access
CrowdStrike launches SafeMind, the first agentic cybersecurity solution for defenders
Claude, DeepSeek, and Qwen AI agents combinedly used to hit gov.t across Asia
India: C-DOT Launches 14 Local Quantum-Safe Technologies
14,000 Dahua cameras compromised: TP-Link flaws enable RCE
Microsoft Reveals Project Zenith Windows PCs Able to Run 30B+ AI Models Locally
Google issues warning of new Chrome zero-day flaw exploited
CrowdStrike’s ‘FalconFlank’ zero-day allows SYSTEM privileges
727,000 data exposes: French hospital fined €500,000
153 Million Driver’s License Surfaced on Dark Web: FBI Starts Investigation
First, CVE-2026-29114 exposes a sensitive certificate chain issue with a CVSS base score of 2.3. According to the advisory, “An attacker may obtain the device’s CA root certificate.” Consequently, if this CA is trusted by client systems, an attacker “could issue fraudulent certificates trusted by those clients and undermine the certificate trust chain.” This presents long-term risks for secure communications.
Additionally, there are two DoS problems that risk the ongoing access to important surveillance feeds. CVE-2026-29115 has a CVSS score of 6.9 and lets a logged-in attacker crash the system from afar. Even more concerning, CVE-2026-29116 is a serious problem with a CVSS score of 8.7, and it doesn’t need any login.
The official report says it “could let an attacker without authentication send a special packet, causing the system to restart unexpectedly and lead to a denial of service.” This means hackers can turn off your security cameras when they want.
Mitigating these Dahua product issues needs quick action from IT teams. Check your device models and build dates. For instance, many IPC and SD models made before March 26, 2026, are at high risk. Admins should update to the latest firmware using cloud upgrades or manual downloads. For all the details, check the official Dahua security notice. Protect your systems by patching now.
