{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: Dahua vulnerabilities","home_page_url":"https://patchfirst.co/vendor/dahua/","feed_url":"https://patchfirst.co/feed/vendor/dahua.json","description":"New and newly exploited Dahua CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2025-31704","url":"https://patchfirst.co/cve/CVE-2025-31704/","title":"CVE-2025-31704: A vulnerability has been found in the Dahua Intelligent Connection Center","content_text":"Dahua · Intelligent Connection Center. Not in CISA KEV. No EPSS score. CVSS 9.8 CRITICAL. Priority 52.5 of 100.","summary":"A vulnerability has been found in the Dahua Intelligent Connection Center","date_published":"2026-10-30T00:00:00.000Z","date_modified":"2026-10-30T19:39:14.000Z","tags":[],"_patchfirst":{"reason":"published","priority":52.5,"kev":null,"epss":null,"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Dahua","product":"Intelligent Connection Center","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2021-33045#kev","url":"https://patchfirst.co/cve/CVE-2021-33045/","title":"[KEV] CVE-2021-33045: Dahua IP Camera Authentication Bypass Vulnerability","content_text":"Dahua · IP Camera Firmware. In CISA KEV since 2024-08-21. ENISA EUVD lists it as exploited. EPSS 99.6% (higher than 99.95% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts. Named in 1 threat report. Priority 73.7 of 100.","summary":"Dahua IP Camera Authentication Bypass Vulnerability","date_published":"2024-08-21T00:00:00.000Z","date_modified":"2026-06-17T03:54:04.000Z","tags":["kev","public-exploit","T1190","T1078"],"_patchfirst":{"reason":"kev","priority":73.7,"kev":{"dateAdded":"2024-08-21","ransomware":false},"epss":{"score":0.99593,"percentile":0.99947},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Dahua","product":"IP Camera Firmware","techniqueIds":["T1190","T1078"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2021-33044#kev","url":"https://patchfirst.co/cve/CVE-2021-33044/","title":"[KEV] CVE-2021-33044: Dahua IP Camera Authentication Bypass Vulnerability","content_text":"Dahua · IP Camera Firmware. In CISA KEV since 2024-08-21. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.98% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts. Named in 1 threat report. Priority 73.7 of 100.","summary":"Dahua IP Camera Authentication Bypass Vulnerability","date_published":"2024-08-21T00:00:00.000Z","date_modified":"2026-06-17T03:54:03.000Z","tags":["kev","public-exploit","T1190","T1078"],"_patchfirst":{"reason":"kev","priority":73.7,"kev":{"dateAdded":"2024-08-21","ransomware":false},"epss":{"score":0.99989,"percentile":0.99984},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Dahua","product":"IP Camera Firmware","techniqueIds":["T1190","T1078"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-3836","url":"https://patchfirst.co/cve/CVE-2023-3836/","title":"CVE-2023-3836: Dahua Smart Park Management unrestricted upload","content_text":"Dahua · Smart Park Management. Not in CISA KEV. EPSS 73.7% (higher than 99.47% of CVEs). CVSS 6.3 MEDIUM. Public exploit code exists. Priority 64.3 of 100.","summary":"Dahua Smart Park Management unrestricted upload","date_published":"2023-07-22T00:00:00.000Z","date_modified":"2024-08-02T07:08:50.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":64.3,"kev":null,"epss":{"score":0.7367,"percentile":0.99471},"cvss":{"score":6.3,"severity":"MEDIUM","version":"3.1"},"vendor":"Dahua","product":"Smart Park Management","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}}]}