CISA KEV guidance for Dahua IP camera authentication-bypass flaws (CVE-2021-33044, CVE-2021-33045)

Dahua cameras authentication-bypass vulnerabilities (multiple vulnerabilities)

How related: The two 2021 flaws are authentication-bypass vulnerabilities in Dahua cameras and related products.

About this happening: The CVE-2021-33044 and CVE-2021-33045 authentication-bypass flaws in Dahua cameras and related products remain an access risk because attackers can bypass device ident...

Operation CameraSwarm campaign targeting Dahua devices

How related: Cybersecurity researchers at Hunt.io have disclosed details of a campaign that they say compromised more than 14,530 Dahua devices between June 17 and July 22, 2026, using credential attacks, two authentication-bypass flaws, and a peer-to-peer (P2P) relay technique.

About this happening: The Operation CameraSwarm campaign compromised more than 14,530 Dahua devices, creating persistent camera access and raising unauthorized surveillance risk across affected...

N-able security patch release for CVE-2026-18577

About this happening: N-able is warning that CVE-2026-18577 is being actively exploited against N-central on both hosted and on-premises servers. The vendor released hotfix 2026.3...

Russian intelligence security camera hijacking campaign across Europe and Ukraine

About this happening: Russian intelligence service is systematically hijacking internet-connected security cameras across Europe and Ukraine, turning exposed devices into live surveillance...

CERT/CC Tenda router backdoor mitigation

About this happening: CERT/CC issued interim mitigation for Tenda firmware after disclosure of CVE-2026-11405, advising users to disable remote management and change the default LAN I...