Dahua cameras authentication-bypass vulnerabilities (multiple vulnerabilities)
Vulnerability
Summary
Hide ▲
Show ▼
The CVE-2021-33044 and CVE-2021-33045 authentication-bypass flaws in Dahua cameras and related products remain an access risk because attackers can bypass device identity checks on affected systems. Hunt.io linked the flaws to 1,923 cameras reached during Operation CameraSwarm, showing the issues are still useful for unauthorized device access. Dahua lists fixed firmware, and CISA KEV still tracks both issues as exploited vulnerabilities. Defenders need to install the vendor repair software or newer firmware, or discontinue use where mitigations are unavailable.
Cases
Related Happenings
CISA KEV guidance for Dahua IP camera authentication-bypass flaws (CVE-2021-33044, CVE-2021-33045)
Advisory/Mitigation
H score81
First: 19.08.2026 14:34
Last: 19.08.2026 14:34
Sources 1
How related:
As of August 19, 2026, both flaws remain listed in the U.S. Cybersecurity and Infrastructure Security Agency's (CISA) Known Exploited Vulnerabilities (KEV) catalog, which records them as Dahua IP camera authentication-bypass vulnerabilities and advises applying vendor mitigations or discontinuing use if mitigations are unavailable.
About this happening:
CISA kept CVE-2021-33044 and CVE-2021-33045 in the KEV catalog for Dahua IP camera authentication-bypass vulnerabilities, directing defenders to apply vendor...
CISA KEV guidance for Dahua IP camera authentication-bypass flaws (CVE-2021-33044, CVE-2021-33045)
Advisory/MitigationHow related: As of August 19, 2026, both flaws remain listed in the U.S. Cybersecurity and Infrastructure Security Agency's (CISA) Known Exploited Vulnerabilities (KEV) catalog, which records them as Dahua IP camera authentication-bypass vulnerabilities and advises applying vendor mitigations or discontinuing use if mitigations are unavailable.
About this happening: CISA kept CVE-2021-33044 and CVE-2021-33045 in the KEV catalog for Dahua IP camera authentication-bypass vulnerabilities, directing defenders to apply vendor...
Operation CameraSwarm campaign targeting Dahua devices
Campaign
H score71
First: 19.08.2026 14:34
Last: 19.08.2026 14:34
Sources 1
How related:
Cybersecurity researchers at Hunt.io have disclosed details of a campaign that they say compromised more than 14,530 Dahua devices between June 17 and July 22, 2026, using credential attacks, two authentication-bypass flaws, and a peer-to-peer (P2P) relay technique.
About this happening:
The Operation CameraSwarm campaign compromised more than 14,530 Dahua devices, creating persistent camera access and raising unauthorized surveillance risk across affected...
Operation CameraSwarm campaign targeting Dahua devices
CampaignHow related: Cybersecurity researchers at Hunt.io have disclosed details of a campaign that they say compromised more than 14,530 Dahua devices between June 17 and July 22, 2026, using credential attacks, two authentication-bypass flaws, and a peer-to-peer (P2P) relay technique.
About this happening: The Operation CameraSwarm campaign compromised more than 14,530 Dahua devices, creating persistent camera access and raising unauthorized surveillance risk across affected...
StormEncryptor ransomware deployment by Storm-1175
Malware Activity
H score40
First: 10.08.2026 20:42
Last: 10.08.2026 20:42
Sources 1
About this happening:
Storm-1175 is deploying StormEncryptor, a previously undocumented ransomware strain that appends .encrypted to encrypted files and drops !!!README_FIRST!!!.txt ran...
StormEncryptor ransomware deployment by Storm-1175
Malware ActivityAbout this happening: Storm-1175 is deploying StormEncryptor, a previously undocumented ransomware strain that appends .encrypted to encrypted files and drops !!!README_FIRST!!!.txt ran...
CERT/CC Tenda router backdoor mitigation
Advisory/Mitigation
H score31
First: 07.07.2026 09:40
Last: 07.07.2026 09:40
Sources 1
About this happening:
CERT/CC issued interim mitigation for Tenda firmware after disclosure of CVE-2026-11405, advising users to disable remote management and change the default LAN I...
CERT/CC Tenda router backdoor mitigation
Advisory/MitigationAbout this happening: CERT/CC issued interim mitigation for Tenda firmware after disclosure of CVE-2026-11405, advising users to disable remote management and change the default LAN I...
Timeline
-
19.08.2026 14:34 2 articles · 5h ago
Operation CameraSwarm uses Dahua camera authentication bypasses
Initial DisclosureHunt.io said Operation CameraSwarm compromised more than 14,530 Dahua devices between June 17 and July 22, 2026 by combining credential attacks, CVE-2021-33044, CVE-2021-33045, and a P2P relay path. The researchers said 1,923 cameras were configured with a persistent account and 283 were reached through P2P, while Dahua and CISA still track the two authentication-bypass flaws and advise installing vendor fixes or newer firmware.
Show sources
- Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P — thehackernews.com — 19.08.2026 14:34
- Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P — thehackernews.com — 19.08.2026 14:34