# CVE-2026-29116: Dahua Products Denial of Service via Reachable Assertion

Source: https://junglewise.ai/threats/cve-2026-29116-dahua-products-denial-of-service-via-reachable-assertion  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-10. Updated: 2026-06-10  
License: CC BY 4.0 with a link back

CVE-2026-29116 · Severity: info · CVSS 8.7 · Published 2026-06-10

A vulnerability in certain Dahua security products allows an unauthenticated remote attacker to crash the device. By sending a specifically crafted network packet, the attacker can trigger a system exception that causes the device to reboot unexpectedly. This results in a denial of service, temporarily disabling surveillance or security monitoring capabilities.

## Quick answers

**Is CVE-2026-29116 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-29116 being exploited in the wild.

**How severe is CVE-2026-29116?** Informational severity, with a CVSS score of 8.7, published 10 June 2026.

**Which products and versions are affected?** Dahua Technologies Dahua Products.

**Is there a fix for CVE-2026-29116?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-29116 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-29116?** Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

This vulnerability is classified as a Reachable Assertion (CWE-617). It exists in the network stack or service handling of certain Dahua products, where a specially crafted packet can trigger a logic exception. Because the system does not gracefully handle this exception, it results in an immediate reboot of the hardware. The attack is network-reachable, requires no authentication, and involves no user interaction. Successful exploitation results in a complete loss of availability (Denial of Service) until the device finishes its reboot cycle.

## Affected products

- Dahua Technologies Dahua Products

## Timeline

- 2026-06-10: disclosed: Initial publication of the vulnerability advisory.
- 2026-06-10: advisory: Dahua PSIRT released security advisory DHCC-SA-202606-001.

## References

- [https://www.dahuasecurity.com/about-dahua/trust-center/dahua-psirt/dhcc-sa-202606-001:-security-advisory-%E2%80%93-vulnerabilities-found-in-some-dahua-products](https://www.dahuasecurity.com/about-dahua/trust-center/dahua-psirt/dhcc-sa-202606-001:-security-advisory-%E2%80%93-vulnerabilities-found-in-some-dahua-products)