What is the dahua CNA?

dahua is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 45 CVE records since 2017.

How many CVEs has dahua published?

dahua has published 45 CVE records, including 10 in the last two years.

What is dahua's CVE data quality grade?

RadicalNotion.AI grades dahua's CVE data quality as F, with an overall completeness score of 53.9%. This reflects how consistently its CVE records include vendor (42.2%), product (100%), CVSS (22.2%), and CWE (51.1%) information.

What products does dahua publish CVEs for?

dahua most frequently publishes CVEs for dhi-dss7016dr-s2 firmware, dss express, dhi-dss4004-s2 firmware, dhi-dss7016dr-s2, dhi-dss7016d-s2.

Which vendors does dahua cover?

dahua publishes CVEs across 4 distinct vendors, most often dahuasecurity, Dahua, microsoft, linux.

Is dahua actively publishing CVEs?

dahua is currently active, based on 10 CVEs in the last two years.

What is the average severity of dahua's CVEs?

The average CVSS base score across dahua's scored CVEs is 7.2.

How many critical CVEs has dahua published?

dahua has published 7 critical-severity CVEs and 21 high-severity CVEs.

Are any of dahua's CVEs in CISA's Known Exploited Vulnerabilities catalog?

Yes. 2 of dahua's CVEs are listed in CISA's Known Exploited Vulnerabilities (KEV) catalog, meaning they are confirmed to be exploited in the wild.

What are the most common weakness types in dahua's CVEs?

dahua's CVEs most often map to these CWE weakness types: CWE-287 (Improper Authentication), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-306 (Missing Authentication for Critical Function), CWE-284 (Improper Access Control).

How does dahua rank among CNAs?

By total CVE volume, dahua ranks #176 of 370 CNAs, and it reports more complete CVE records than 9% of all CNAs.

Grade F

Active

dahua

Name: dahua CNA CVE data quality report card
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE Numbering Authority

Latest CVE published October 15, 2025

CVEs published

Total assigned

7.9

Years active

2017–2025

7.2

Avg CVSS

Across scored CVEs

Recent CVEs

Last 2 years

Overview

dahua is a CVE Numbering Authority that has published 45 CVE records since 2017. It is currently classified as active, with 10 CVEs published in the last two years. Its CVE data quality is graded F (53.9% overall completeness).

Among the 370 CNAs tracked here, dahua ranks #176 by CVE volume and reports more complete records than 9% of all CNAs.

Data quality report card

Completeness of dahua's CVE records across vendor, product, CVSS, and CWE fields.

A CVE record needs only a description to be published. Completeness is how often dahua also fills in the affected vendor and product, a CVSS severity score, and a CWE weakness type. A higher score means fewer of this CNA’s CVEs need enriching by hand before you can triage them.

Report card grade

53.9%

Overall score

Overall completeness53.9%

Vendor completeness42.2%

Product completeness100%

CVSS completeness22.2%

CWE completeness51.1%

100%

Update rate

Records revised after publishing

Vendor diversity

Distinct vendors covered

279 chars

Avg description length

Per CVE record

2017-11-13

First CVE date

Earliest assignment

2025-10-15

Latest CVE date

Most recent assignment

7.2

Average CVSS

Across scored CVEs

What these scores mean

Vendor completeness: The share of this CNA's CVEs that name an affected vendor.
Product completeness: The share that name a specific affected product.
CVSS completeness: The share that include a CVSS severity score.
CWE completeness: The share mapped to a CWE weakness type.
Update rate: How often this CNA revises CVE records after first publishing them.
Vendor diversity: How many distinct vendors this CNA publishes CVEs for.

Severity and exploitation

How the CVSS severity of dahua's published CVEs breaks down, and how many are known to be exploited in the wild.

Critical7

High21

Medium16

Low5

In CISA’s Known Exploited Vulnerabilities catalog

2 of dahua's CVEs are confirmed exploited in the wild and carry a CISA remediation deadline.

Common weakness types

The CWE weakness categories dahua most often assigns to its CVEs. Follow any weakness to its full explanation.

Publishing activity by year

How many CVEs dahua has published each year.

2019

2020

2021

2022

2023

2024

2025

2026

Top vendors

The vendors dahua publishes the most CVEs for.

dahuasecurity42 CVEs
Dahua27 CVEs
microsoft3 CVEs
linux2 CVEs

Latest CVEs

The most recent CVEs assigned by dahua.

CVE-2026-29116CWE-617
High · CVSS 8.7
EPSS 0.6%2026-06-10
CVE-2026-29115CWE-617
Medium · CVSS 6.9
EPSS 0.5%2026-06-10
CVE-2026-29114CWE-538
Low · CVSS 2.3
EPSS 0.3%2026-06-10
CVE-2025-31703CWE-305
Low · CVSS 2.4
EPSS 0.3%2026-03-18
CVE-2025-31702CWE-732
Medium · CVSS 6.8
EPSS 0.5%2025-10-15
CVE-2025-31701CWE-120
High · CVSS 8.1
EPSS 0.9%2025-07-23
CVE-2025-31700CWE-120
High · CVSS 8.1
EPSS 0.9%2025-07-23
CVE-2024-39950CWE-121
Critical · CVSS 9.8
EPSS 0.5%2024-07-31
CVE-2024-39949CWE-617
High · CVSS 7.5
EPSS 0.6%2024-07-31
CVE-2024-39948CWE-476
High · CVSS 7.5
EPSS 0.6%2024-07-31
CVE-2024-39947
Medium · CVSS 6.5
EPSS 0.5%2024-07-31
CVE-2024-39946
High · CVSS 7.2
EPSS 0.4%2024-07-31

Get an alert for each new dahua CVE, with AI-written analysis and remediation steps.

Monitor dahua CVEs

Other CNAs

Data quality for other CVE Numbering Authorities.

mitreGrade F · 112,208 CVEs PatchstackGrade A · 14,729 CVEs VulDBGrade A · 12,140 CVEs microsoftGrade F · 11,701 CVEs redhatGrade F · 10,745 CVEs GitHub_MGrade A · 10,605 CVEs LinuxGrade F · 10,294 CVEs WordfenceGrade A · 8,652 CVEs

Browse all CNAs

Frequently asked questions

Common questions about the dahua CNA.

What is the dahua CNA?: dahua is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 45 CVE records since 2017.
How many CVEs has dahua published?: dahua has published 45 CVE records, including 10 in the last two years.
What is dahua's CVE data quality grade?: RadicalNotion.AI grades dahua's CVE data quality as F, with an overall completeness score of 53.9%. This reflects how consistently its CVE records include vendor (42.2%), product (100%), CVSS (22.2%), and CWE (51.1%) information.
What products does dahua publish CVEs for?: dahua most frequently publishes CVEs for dhi-dss7016dr-s2 firmware, dss express, dhi-dss4004-s2 firmware, dhi-dss7016dr-s2, dhi-dss7016d-s2.
Which vendors does dahua cover?: dahua publishes CVEs across 4 distinct vendors, most often dahuasecurity, Dahua, microsoft, linux.
Is dahua actively publishing CVEs?: dahua is currently active, based on 10 CVEs in the last two years.
What is the average severity of dahua's CVEs?: The average CVSS base score across dahua's scored CVEs is 7.2.
How many critical CVEs has dahua published?: dahua has published 7 critical-severity CVEs and 21 high-severity CVEs.
Are any of dahua's CVEs in CISA's Known Exploited Vulnerabilities catalog?: Yes. 2 of dahua's CVEs are listed in CISA's Known Exploited Vulnerabilities (KEV) catalog, meaning they are confirmed to be exploited in the wild.
What are the most common weakness types in dahua's CVEs?: dahua's CVEs most often map to these CWE weakness types: CWE-287 (Improper Authentication), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-306 (Missing Authentication for Critical Function), CWE-284 (Improper Access Control).
How does dahua rank among CNAs?: By total CVE volume, dahua ranks #176 of 370 CNAs, and it reports more complete CVE records than 9% of all CNAs.

References

CNA report-card grades are computed by RadicalNotion.AI from published CVE records. CVE data is sourced from the CVE Program.

Track dahua CVEs

Get an alert when this CNA publishes a new CVE, with AI-written analysis and remediation steps.

Create an account See pricing