{"id":"CVE-2026-29114","aliases":["EUVD-2026-35984","GHSA-9359-w3rx-353r"],"status":"published","title":"A vulnerability has been found in some Dahua products. An attacker\nmay obtain the device’s CA...","description":"A vulnerability has been found in some Dahua products. An attacker\nmay obtain the device’s CA root certificate. If that CA is installed and\ntrusted on client systems, the attacker could issue fraudulent certificates\ntrusted by those clients and undermine the certificate trust chain.","severity":{"version":"4.0","score":2.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.0019,"percentile":0.08654,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-538"],"published":"2026-06-10T05:44:50Z","modified":"2026-07-23T09:10:00Z","exploits":[{"source":"pocgithub","id":"CrimsonfiedOfficial/CVE-2026-29114","title":"CrimsonfiedOfficial/CVE-2026-29114","date":"2026-07-11","url":"https://github.com/CrimsonfiedOfficial/CVE-2026-29114"}],"products":[{"vendor":"dahua","product":"ipc"}],"references":[{"url":"https://www.dahuasecurity.com/about-dahua/trust-center/dahua-psirt/dhcc-sa-202606-001:-security-advisory-%E2%80%93-vulnerabilities-found-in-some-dahua-products"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-29114"},{"url":"https://github.com/advisories/GHSA-9359-w3rx-353r"}],"sources":{"cve":[{"id":"CVE-2026-29114","description":"A vulnerability has been found in some Dahua products. An attacker\nmay obtain the device’s CA root certificate. If that CA is installed and\ntrusted on client systems, the attacker could issue fraudulent certificates\ntrusted by those clients and undermine the certificate trust chain.","status":"published","published":"2026-06-10T05:44:50.397Z","modified":"2026-06-10T14:59:30.314Z","cvss":[{"version":"4.0","score":2.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","level":"low","assessor":"cna"}],"cwes":["CWE-538"],"updated_at":"2026-11-02T14:19:56.284359Z"}],"euvd":[{"id":"EUVD-2026-35984","description":"A vulnerability has been found in some Dahua products. An attacker\nmay obtain the device’s CA root certificate. If that CA is installed and\ntrusted on client systems, the attacker could issue fraudulent certificates\ntrusted by those clients and undermine the certificate trust chain.","status":"published","published":"2026-06-10T05:44:50Z","modified":"2026-06-10T14:59:30Z","cvss":[{"version":"4.0","score":2.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","level":"low"}],"updated_at":"2026-11-02T18:20:45.405546Z"}],"ghsa":[{"id":"GHSA-9359-w3rx-353r","title":"A vulnerability has been found in some Dahua products. An attacker\nmay obtain the device’s CA...","description":"A vulnerability has been found in some Dahua products. An attacker\nmay obtain the device’s CA root certificate. If that CA is installed and\ntrusted on client systems, the attacker could issue fraudulent certificates\ntrusted by those clients and undermine the certificate trust chain.","status":"published","published":"2026-06-10T09:31:57Z","modified":"2026-06-10T09:32:03Z","cvss":[{"version":"4.0","score":2.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low"}],"cwes":["CWE-538"],"updated_at":"2026-11-02T15:08:43.417477Z"}],"nvd":[{"id":"CVE-2026-29114","description":"A vulnerability has been found in some Dahua products. An attacker\nmay obtain the device’s CA root certificate. If that CA is installed and\ntrusted on client systems, the attacker could issue fraudulent certificates\ntrusted by those clients and undermine the certificate trust chain.","status":"published","published":"2026-06-10T07:16:24.89Z","modified":"2026-07-23T09:10:00.113Z","cvss":[{"version":"4.0","score":2.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low","assessor":"secondary"}],"cwes":["CWE-538"],"updated_at":"2026-11-02T14:12:23.485267Z"}]}}