- Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks . . .
As of August 19, 2026, both flaws remain listed in the U S Cybersecurity and Infrastructure Security Agency's (CISA) Known Exploited Vulnerabilities (KEV) catalog, which records them as Dahua IP camera authentication-bypass vulnerabilities and advises applying vendor mitigations or discontinuing use if mitigations are unavailable
- Camera Vulnerability Report(CVE-2025-52598~52601, 8075)
OVERVIEW - Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT IoT security, discovered vulnerabilities in Camera and reported them to Hanwha Vision S-CERT on April 7, 2025
- Dahua Camera Flaws Allow Remote Takeover via ONVIF Exploits
Cybersecurity researchers have identified two critical vulnerabilities, CVE-2025-31700 and CVE-2025-31701, in the firmware of Dahua smart cameras These flaws, with CVSS scores of 8 1, are buffer overflow vulnerabilities that can be exploited by sending specially crafted malicious packets
- CVE-2026-85478: CM2507 IP Camera Auth Bypass Vulnerability - SentinelOne
CVE-2026-85478 is an authentication bypass vulnerability in CM2507 IP Camera firmware Learn about its impact, affected versions, and mitigation methods
- Finding (and exploiting) vulnerabilities on IP Cameras: the Tenda CP3 . . .
In this paper, we discuss a methodology for the security analysis and identification of remotely exploitable vulnerabilities in IP cameras, which includes static and dynamic analyses of executables extracted from IP camera firmware
- GitHub - andylee77 anjvision-cve-2026: Coordinated disclosure for . . .
Multi-CVE coordinated disclosure for vulnerabilities in the firmware running on IP cameras manufactured by Shenzhen Anjia Vision Information Technology Co , Ltd (Anjvision) and resold under the brand names Jennov, Anpviz, GWSecurity, SV3C, Jovision, Esunstar, and ICamra
- CVE-2025-25984: Macro-video V380e6 C1 Firmware RCE Flaw
CVE-2025-25984 is a remote code execution vulnerability in Macro-video V380e6 C1 IP camera firmware Learn about its impact, affected versions, and mitigation
- Hikvision Camera Vulnerability Targeted in Remote Code Execution . . .
Scanning and remote code execution attempts targeting video surveillance devices in Ukraine rose between September 21 and October 1, 2026 Most activity focused on CVE-2021-36260, a critical command injection flaw in unpatched Hikvision products
- Xiongmai IP Camera Vulnerability Let Attackers Bypass Authentication . . .
Security cameras are designed to keep commercial facilities safe However, a newly disclosed critical vulnerability in Hangzhou Xiongmai Technology’s XM530 IP Cameras is putting networks at risk Tracked under the alert code ICSA-26-113-05 and officially designated as CVE-2025-65856, this flaw
- CVE-2025-31700 CVE-2025-31701 Buffer Overflow Flaws in Dahua IP . . .
Dahua Technology released a security advisory about two serious vulnerabilities in its IP cameras, after a report from the Bitdefender IoT Research Team The vulnerabilities, CVE-2025-31700 and CVE-2025-31701, each have a CVSS score of 8 1 and are due to buffer overflow issues that can let remote attackers crash devices or run arbitrary code
|