Are security cameras & recorders (Hikvision, Dahua and others) safe right now?
No security cameras & recorder flaws have been added to CISA's exploited list in the last 90 days (the most recent was Mar 5, 2026). Keep automatic updates on: that can change any day.
Earlier exploited flaws
- Hikvision Multiple Products Improper Authentication Vulnerability
- Edimax IC-7100 IP Camera OS Command Injection Vulnerability
- NUUO NVRmini2 Devices Missing Authentication Vulnerability
- Reolink RLC-410W IP Camera OS Command Injection Vulnerability
- Reolink Multiple IP Cameras OS Command Injection Vulnerability
- NUUO NVRmini Devices OS Command Injection Vulnerability
- PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability
- PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability
- Dahua IP Camera Authentication Bypass Vulnerability
- Dahua IP Camera Authentication Bypass Vulnerability
- QNAP VioStor NVR OS Command Injection Vulnerability
- Hikvision Improper Input Validation
- Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability
- TVT NVMS-1000 Directory Traversal Vulnerability
By year
| Year | Exploited flaws added | Zero-days |
|---|---|---|
| 2026 (so far) | 1 | 0 |
| 2025 | 1 | 0 |
| 2024 | 8 | 0 |
| 2023 | 1 | 0 |
| 2022 | 1 | 0 |
Questions
Are security cameras & recorders (Hikvision, Dahua and others) safe right now?
No security cameras & recorder flaws have been added to CISA's exploited list in the last 90 days (the most recent was Mar 5, 2026). Keep automatic updates on: that can change any day. Confirm with the vendor's own advisories and install updates as soon as they're available.
How many security cameras & recorders vulnerabilities have been exploited?
14 flaws are on CISA's list of vulnerabilities known to be exploited in real attacks.
Covers products matching hikvision, dahua, dvr, nvr, camera, avtech and more. Sources: CISA's Known Exploited Vulnerabilities catalog and the vendors' own advisories. Updated every hour. General information only; confirm details with the vendor.