CVE-2026-82566EPSS p18.3%
CVE-2026-82566CVE-2026-82566
Description
The Botslab G980H dash camera firmware contains a session management vulnerability in which authentication state can remain valid after the associated client connection has been terminated or replaced. Under certain connection conditions, a newly established connection can displace an existing client while previously established session state remains active until a separate expiration mechanism invalidates it. An unauthenticated attacker with adjacent network access could potentially take advantage of this residual authentication state to access functionality associated with another client's session.
Scoring
| CVSS | 8.8 () |
| Vector | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 0.28% probability of exploitation · percentile 18.3% · 2026-10-05T12:00:23Z |
| Last modified | 2026-09-24 |