CVE-2026-29116 is a vulnerability in multiple Dahua device product lines where an unauthenticated remote attacker can send a crafted packet to trigger an exception, causing an unexpected system reboot and denial of service. The vulnerability is identified as CWE-617 (Reachable Assertion) and affects various Dahua products including IPC, SD, NVR, XVR, EVS, VTO, VTH, ASI, and TPC. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, and high impact on availability. No vendor advisory or patch information is currently available.

Successful exploitation results in denial of service due to unexpected system reboot. This disrupts the availability of affected Dahua devices, potentially impacting surveillance or security monitoring functions. There is no indication of confidentiality or integrity impact. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider limiting network exposure of affected devices and monitoring for unusual reboots. No official fix or temporary workaround has been published by the vendor at this time.