Dahua vulnerabilities
We track 9 vulnerabilities in Dahua products across 8 products. 9 are rated high or critical, and none are known to be exploited. The most recent was published on October 30, 2026.
Latest Dahua vulnerabilities
- 9.8 Critical severity
Intelligent Connection Center: Improper Neutralization of Special Elements used in an OS Command
A vulnerability has been found in the Dahua Intelligent Connection Center. A remote attacker could send a specially crafted request to the affected system, allowing the attacker to execute arbitrary commands, resulting in remote code execution.
- 8.7 High severity
IPC/SD/NVR/XVR/EVS/VTO/VTH/ASI/TPC: Reachable Assertion
A vulnerability has been found in some Dahua products could allow an unauthenticated remote attacker to send a specially crafted packet, triggering an exception that causes the system to reboot unexpectedly, resulting in a denial of service.
- 8.1 High severity
IPC: Buffer Copy without Checking Size of Input
A vulnerability has been found in Dahua products. Attackers could exploit a buffer overflow vulnerability by sending specially crafted malicious packets, potentially causing service disruption (e.g., crashes) or remote code execution (RCE). Some devices may ha
- 8.1 High severity
IPC: Buffer Copy without Checking Size of Input
A vulnerability has been found in Dahua products. Attackers could exploit a buffer overflow vulnerability by sending specially crafted malicious packets, potentially causing service disruption (e.g., crashes) or remote code execution (RCE). Some devices may ha
- 9.8 Critical severity
NVR4XXX and IPC-HX8XXX: Stack-based Buffer Overflow
A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities to initiate device initialization.
- 7.5 High severity
NVR4XXX: Reachable Assertion
A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash.
- 7.5 High severity
NVR4XXX: NULL Pointer Dereference
A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash.
- 7.5 High severity
IPC-HX8XXX and NVR4XXX: Allocation of Resources Without Limits or Throttling
A vulnerability has been found in Dahua products.Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash.
- 9.8 Critical severity
Smart Park Management: Unrestricted Upload of File with Dangerous Type
A vulnerability classified as critical was found in Dahua Smart Park Management up to 20230713. This vulnerability affects unknown code of the file /emap/devicePoint_addImgIco?hasSubsystem=true. The manipulation of the argument upload leads to unrestricted upl