CVE-2021-33045 Dahua Loopback Auth Bypass (global.login Spoof)

Ibrahim Saud@tektrix

•updated Sep 20, 2026•0•0•4

This rule detects an attempt to exploit CVE-2021-33045, an authentication bypass vulnerability in certain Dahua products. An attacker can bypass authentication by sending a crafted HTTP POST request to the application, specifically using a loopback authentication type with a local IP address (127.0.0.1) in the login payload.