What is CVE-2026-29114?

CVE-2026-29114 is a vulnerability in Dahua Ipc, classified under Insertion of Sensitive Information into Externally-Accessible File or Directory. Published 2026-06-10.

Is CVE-2026-29114 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Information disclosure in Dahua Ipc

CVE-2026-29114

A vulnerability has been found in some Dahua products. An attacker may obtain the device’s CA root certificate. If that CA is installed and trusted on client systems, the attacker could issue fraudulent certificates trusted by those client…

EPSS: 0.002 (8.8th percentile) — read the EPSS interpretation.

Affected products

Dahua Ipc — versions Some IPC models are affected, specifically those with a build date before April 15, 2026.

Weakness classification (CWE)

CWE-538 — Insertion of Sensitive Information into Externally-Accessible File or Directory

Public proof-of-concept exploits

CrimsonfiedOfficial/CVE-2026-29114

References

cybersecurity@dahuatech.com

Frequently asked questions

What is CVE-2026-29114?: CVE-2026-29114 is a vulnerability in Dahua Ipc, classified under Insertion of Sensitive Information into Externally-Accessible File or Directory. Published 2026-06-10.
Is CVE-2026-29114 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.