boxscore/security
VENDOR · referenceVendors · latest edition

Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

Dahua

Vendor reference — Dahua · sector: Industrial & Embedded. Cumulative disclosure record across the archive.

Follow Dahua — Atom feed

Career totals

Disclosures & known-exploited
All-timeYTD
CVEs53
KEV entries20
Rate & severity
KEV/100Med CVSSMed EPSSCHML
40.06.9.00400111

KEV/100 = KEV entries ÷ CVEs × 100. Med CVSS / Med EPSS are medians over all disclosures. C/H/M/L = disclosures by CVSS severity band.

Monthly disclosures

Trend (by first-seen month, full archive): ▆▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁█▁▁

Last 12 months (new CVEs by first-seen day)
MonthNew CVEs
2025-090
2025-100
2025-110
2025-120
2026-010
2026-020
2026-030
2026-040
2026-050
2026-063
2026-070
2026-080

Notable CVEs

Ranked by the published formula: KEV → EPSS → CVSS → CVE ID.

Notable (ranked)
CVECVSSEPSS %ileSeverityKEVFirst seen
CVE-2021-33044100.0YES2024-08-21
CVE-2021-3304599.9YES2024-08-21
CVE-2026-291168.732.9HIGH2026-06-10
CVE-2026-291156.929.4MEDIUM2026-06-10
CVE-2026-291142.39.0LOW2026-06-10

Recent CVEs

Most recently seen
CVECVSSEPSS %ileSeverityKEVFirst seen
CVE-2026-291168.732.9HIGH2026-06-10
CVE-2026-291156.929.4MEDIUM2026-06-10
CVE-2026-291142.39.0LOW2026-06-10
CVE-2021-33044100.0YES2024-08-21
CVE-2021-3304599.9YES2024-08-21

Products

This vendor's products with a reference page (≥2 disclosures), by CVE count. A monolithic vendor total dilutes signal; product pages sharpen it.

Products (by CVE count)
ProductCVEsKEV
IP Camera Firmware22

KEV entries

CISA Known Exploited Vulnerabilities (newest addition first)
CVEKEV addedCVSSEPSS %ileSeverity
CVE-2021-330442024-08-21100.0
CVE-2021-330452024-08-2199.9

KEV timing

Fastest to KEV
CVEDays
CVE-2021-330440
CVE-2021-330450
Longest unpatched (KEV due date passed)
CVEDueDays over
CVE-2021-330452024-09-11707
CVE-2021-330442024-09-11707

Methodology

Rate statistics are arithmetic over published figures: KEV/100 = KEV entries ÷ CVEs × 100; medians are taken over this vendor's disclosures. Vendor names are normalized (case, punctuation, common aliases) before aggregation; monthly counts are keyed to first-seen day, the day this archive first observed the record, not the upstream publication date.

Raw counts are not comparable across vendors: disclosure practices, product breadth, and CNA conventions differ widely, so a larger number here does not mean less secure software. This is a reference page assembled from the public record — not a record of its own, and not a ranking of vendors by our judgment.

Sources. CVE records from the CVE Program (cvelistV5); enrichment from NVD (NIST); known-exploited status from the CISA KEV catalog; exploit probability from FIRST EPSS.