CVE-2021-33044 — Dahua surveillance cameras exploited by hackers

88/100

CERT-UA has identified active exploitation of Dahua internet-connected cameras and video recorders using an authentication bypass vulnerability (CVE-2021-33044). Attackers are changing settings and creating unauthorized accounts.

• Actively exploited (CISA KEV, added 2024-08-21)
• CVSS 9.8
• EPSS 100 %
• Dahua
• CWE-287

Digest of 2026-10-27

Sources

• The Record (Recorded Future News) — Ukraine warns hackers are exploiting Chinese-made Dahua surveillance cameras