YES and it already has happened repeatedly.
Your doorbell sits on the same WiFi network as your laptop, your phone, your NAS drive, and every other device in your home. it's also outside your house. exposed to anyone walking past with a laptop.
Bitdefender found a high-severity vulnerability in Amazon Ring Video Doorbell Pro devices. An attacker standing near your home during the setup process could intercept an unencrypted network packet and steal your WiFi password.
Smaller brands are worse. A $70 Ctronics doorbell was found sending your WiFi credentials unencrypted to Chinese servers.
In 2025 a critical vulnerability in popular smart doorbell firmware allowed attackers to unlock doors remotely. the manufacturer released a patch but 67% of affected devices remained unpatched six months later because users didn't know updates were available.
your doorbell from two years ago may be running firmware with a known vulnerability patched last month. you just never applied the update.
Put your doorbell on a separate IoT VLAN or guest network.
Change the default password on setup.
Enable auto-updates and check manually every 90 days also avoid unbranded cheap doorbells entirely.