Vendor
Dahua
21 known vulnerabilities in products by Dahua, 0 of them actively exploited (CISA KEV).
Key figures
21
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-31704 | Dahua Intelligent Connection Center command injection | 9.8 | |
| Critical | CVE-2017-3223 | Dahua IP Camera: Stack-based Buffer Overflow | 9.8 | |
| High | CVE-2019-3948 | Dahua: security vulnerability | 7.5 | |
| Critical | CVE-2023-3836 | Dahua Smart Park Management unrestricted upload | 6.3 | |
| High | CVE-2025-31700 | Dahua IPC: Buffer Overflow | 8.1 | |
| High | CVE-2026-29116 | Dahua IPC/SD/NVR/XVR/EVS/VTO/VTH/ASI/TPC: Reachable Assertion | — | |
| High | CVE-2025-31701 | Dahua IPC: Buffer Overflow | 8.1 | |
| Medium | CVE-2026-29115 | Dahua IPC/SD: Reachable Assertion | — | |
| Critical | CVE-2024-39950 | Dahua NVR4XXX and IPC-HX8XXX: Stack-based Buffer Overflow | 8.6 | |
| High | CVE-2024-39949 | Dahua NVR4XXX: Reachable Assertion | 7.5 | |
| High | CVE-2024-39948 | Dahua NVR4XXX: NULL Pointer Dereference | 7.5 | |
| High | CVE-2024-39944 | Dahua IPC-HX8XXX and NVR4XXX: Allocation of Resources Without Limits or Throttling | 7.5 | |
| Medium | CVE-2025-31702 | Dahua IPC: Incorrect Permission Assignment for Critical Resource | 6.8 | |
| Medium | CVE-2024-13130 | Dahua IPC-HFW1200S Web Interface Sha1Account1 path traversal | 4.3 | |
| Medium | CVE-2019-9681 | Dahua Technology IPC-HDBW4X2X Firmware: security vulnerability | 5.3 | |
| Medium | CVE-2024-39947 | Dahua NVR4XXX: security vulnerability | 6.5 | |
| High | CVE-2024-39946 | Dahua NVR4XXX: security vulnerability | 6.0 | |
| Medium | CVE-2024-39945 | Dahua NVR4XXX: security vulnerability | 4.9 | |
| Medium | CVE-2023-3121 | Dahua Smart Parking Management image server-side request forgery | 3.5 | |
| Low | CVE-2025-31703 | Dahua NVR2-4KS3: Authentication Bypass by Primary Weakness | — | |
| Low | CVE-2026-29114 | Dahua IPC: Insertion of Sensitive Information into Externally-Accessible File or Directory | — |
Products
| Dahua NVR4XXX | 5 | 0 |
| Dahua IPC | 4 | 0 |
| Dahua SD | 3 | 0 |