CVE-2025-31704: Dahua Intelligent Connection Center command injection
Published Oct 30, 2026
·Updated
A vulnerability has been found in the Dahua Intelligent Connection Center. A remote attacker could send a specially crafted request to the affected system, allowing the attacker to execute arbitrary commands, resulting in remote code execution.
Event History
Oct 30, 2026
CVE Published
via MITRE·10:25 AM
Data Sourced
via MITRE·10:25 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
The attacker needs network access to a vulnerable system. The supplied vector indicates no privileges or user interaction are required, and exploitation has low attack complexity.
2
Which deployments are most exposed?
Dahua Intelligent Connection Center instances reachable over the network are exposed to remote exploitation. The provided information does not state whether any particular default configuration is affected.