CVEPublished 2026-06-10Modified 2026-07-230 articles on news4 live referencesNVD data

CVE-2026-29114

Vulnerability data via NVD (ingested)

CVSS v3.1
EPSS percentile
9
Exploit Prediction Scoring System · top 91% of all CVEs
Description

A vulnerability has been found in some Dahua products. An attacker may obtain the device’s CA root certificate. If that CA is installed and trusted on client systems, the attacker could issue fraudulent certificates trusted by those clients and undermine the certificate trust chain.

Timeline
Published 2026-06-10
Modified 2026-07-23

External references

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).

More intel sources (5)

Known PoCs on GitHub (3)

We haven't classified any articles referencing CVE-2026-29114 yet. The external references above still apply.