Dahua Security Vulnerability Advisory: CVE-2026-2954 (CA Compromise), CVE-2026-2955/56 (DoS)

Vulnerability Overview CVE-2026-2954: A vulnerability was found in certain Dahua products. An attacker may obtain the device's CA root certificate. If the CA is installed in a trusted client system, the attacker can issue fraudulent certificates trusted by these clients, thereby compromising the certificate trust chain. CVE-2026-2955: A vulnerability was found in certain Dahua products. An authenticated remote attacker can send specially crafted packets to trigger an exception, causing the system to restart unexpectedly and resulting in a denial of service. CVE-2026-2956: A vulnerability was found in certain Dahua products. An unauthenticated remote attacker can send specially crafted packets to trigger an exception, causing the system to restart unexpectedly and resulting in a denial of service. Affected Products CVE-2026-2954: - Base Score: 1.3 (CVSS:4.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N) - Base Score: 6.9 (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/SC:H/IA:N) - Base Score: 8.7 (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/SC:H/IA:H) CVE-2026-2955: - Base Score: 1.3 (CVSS:4.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) - Base Score: 6.9 (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/SC:N/IA:H) - Base Score: 8.7 (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/SC:N/IA:H) CVE-2026-2956: - Base Score: 1.3 (CVSS:4.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) - Base Score: 6.9 (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/SC:N/IA:H) - Base Score: 8.7 (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/SC:N/IA:H) Remediation Firmware Download: - Please download the corresponding patched software or update to the latest firmware version from the official Dahua website. - For products with cloud upgrade functionality, the relevant patched version can be obtained via cloud upgrade. - For products without cloud upgrade functionality, please refer to the following two channels: - Dahua Official Website: https://www.dahuasecurity.com/support-center - Contact Dahua technical support personnel in your region and country. Additional Information Release Date: 2026-06-10 References: Dahua PSIRT Acknowledgements: - CVE-2026-2954: Discovered by security researcher Rahul Bham. - CVE-2026-2955 and CVE-2026-2956: Discovered by Thomas Weber from CyberDanube. Security Commitment Dahua is committed to maintaining the highest standards of cybersecurity, ensuring the security of all products and solutions. The Dahua Product Security Incident Response Team (PSIRT) is dedicated to responding to and resolving any reported security vulnerabilities in a timely manner. Dahua conducts a comprehensive investigation of reported security vulnerabilities immediately and is developing enhanced security measures to address the reported issues. Dahua recommends that customers follow its security recommendations to ensure their product systems are protected with the latest updates. Revision History Version: V1.0 Description: Initial public release Date: June 10, 2026 Contact Information Support Contact: For any questions or concerns, please contact Dahua PSIRT: psirt@dahuasecurity.com

Goal Reached Thanks to every supporter — we hit 100%!

Dahua Security Vulnerability Advisory: CVE-2026-2954 (CA Compromise), CVE-2026-2955/56 (DoS)