CVE-2025-31704

LOWCVSS 9.8 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability has been found in the Dahua Intelligent Connection Center. A remote attacker could send a specially crafted request to the affected system, allowing the attacker to execute arbitrary commands, resulting in remote code execution.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-10-30: 210-30
Referenced assets1 URL
Full discourse2 posts
  • Parameter Watch@ParameterWatch

    ⚠️ CVE-2025-31704 (9.8) ⚠️ Dahua's Intelligent Connection Center lets a remote attacker run commands on the server with a crafted request. No fixed version is named yet, so treat any exposed install as at risk. https://t.co/Fhrgi20KOK

    100002
    21 followersView on X
  • cve.now@cvedotnow

    🔴 Dahua Intelligent Connection Center: remote code execution via command injection (CVE-2025-31704) A remote attacker can send a specially crafted request to run arbitrary commands on the affected system. Patch → V5.000.0000000.15 https://cve.now/CVE-2025-31704?utm_source=x&utm_medium=social&utm_campaign=cvedotnow&utm_content=critical

    00000198
    8.1K followersView on X

Explore more