# CVE-2026-29115: Dahua Products Denial of Service via Reachable Assertion

Source: https://junglewise.ai/threats/cve-2026-29115-dahua-products-denial-of-service-via-reachable-assertion  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-10. Updated: 2026-06-10  
License: CC BY 4.0 with a link back

CVE-2026-29115 · Severity: info · CVSS 6.9 · Published 2026-06-10

A vulnerability in certain Dahua security products allows an authorized user to crash the device remotely. By sending a specifically crafted network packet, an attacker can force the system to reboot unexpectedly. This results in a denial of service, temporarily disabling video surveillance or security monitoring capabilities.

Technologies: [Dahua Products](https://junglewise.ai/threats/technologies/dahua-products). Vendors: [Dahua](https://junglewise.ai/threats/vendors/dahua).

## Quick answers

**Is CVE-2026-29115 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-29115 being exploited in the wild.

**How severe is CVE-2026-29115?** Informational severity, with a CVSS score of 6.9, published 10 June 2026.

**Which products and versions are affected?** Dahua Dahua Products.

**Is there a fix for CVE-2026-29115?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-29115 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-29115?** Check whether you run Dahua Products. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A Reachable Assertion vulnerability (CWE-617) exists in multiple Dahua products. The flaw is triggered when the system processes a specially crafted network packet, leading to an unhandled exception and an immediate system reboot. Exploitation requires the attacker to be authenticated with high privileges (PR:H) and have network access to the device. Successful exploitation results in a complete loss of availability for the duration of the reboot cycle. Dahua has released a security advisory (DHCC-SA-202606-001) to address the issue.

## Affected products

- Dahua Dahua Products

## Timeline

- 2026-06-10: disclosed
- 2026-06-10: advisory

## References

- [https://www.dahuasecurity.com/about-dahua/trust-center/dahua-psirt/dhcc-sa-202606-001:-security-advisory-%E2%80%93-vulnerabilities-found-in-some-dahua-products](https://www.dahuasecurity.com/about-dahua/trust-center/dahua-psirt/dhcc-sa-202606-001:-security-advisory-%E2%80%93-vulnerabilities-found-in-some-dahua-products)

## Related threats

- [Dahua Products Sensitive Information Disclosure in CA Root Certificate](https://junglewise.ai/threats/cve-2026-29114-dahua-products-sensitive-information-disclosure-in-ca-root)