CVE-2025-31704
A vulnerability has been found in the Dahua Intelligent Connection Center
- Risk score
- 64/100
- CVSS
- 9.8 v3.1
- Published
- 30 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- A remote code execution vulnerability in the Dahua Intelligent Connection Center allows an attacker to execute arbitrary commands by sending a specially crafted request. This could result in the attacker gaining high privileges, reading sensitive data, and making unauthorized changes.
- Affected
- {'products': ['Dahua Intelligent Connection Center'], 'packages': [], 'versions': []}
- Fix
- Check the linked advisory for details on the fix, as none are provided in this record.
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 9.8 critical
- Remotely exploitable without logging in
References
Original description
A vulnerability has been found in the Dahua Intelligent Connection Center. A remote attacker could send a specially crafted request to the affected system, allowing the attacker to execute arbitrary commands, resulting in remote code execution.
Last activity 30 Oct 2026. Patch Forecast updates every hour.