Critical 9.8
KEV-listed
CVE-2021-33044
Exploitation of Dahua Surveillance Cameras via CVE-2021-33044 and CVE-2021-33045
Vendor / product: Dahua
Event date: 2026-06-17
Public PoC: Yes
First tracked by RiskWire: 2026-10-27
CISA KEV catalog
Added to KEV
Federal remediation due
2024-09-11 (776 days overdue)
Ransomware campaign use
Unknown
CISA description
Dahua IP cameras and related products contain an authentication bypass vulnerability when the NetKeyboard type argument is specified by the client during authentication.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Sources & citations (2)
- Ukraine warns hackers are exploiting Chinese-made Dahua surveillance cameras therecord.media · 2026-10-26
- Ukraine warns of Dahua camera breaches involving cloud access — Arabian Post thearabianpost.com · 2026-10-27
References
See CVE-2021-33044 in context
RiskWire tracks every exploited CVE this week, cross-referenced against CISA KEV with federal remediation deadlines. Filtered to your vendor stack.
Book a 20-min demo →