CVE-2026-85496
High
Description
The Botslab G980H dash camera firmware generates session identifiers using a small sequential value space rather than a suitably unpredictable source. An unauthenticated attacker with adjacent network access and knowledge that an active session exists could potentially determine a valid session identifier and use it to bypass intended authorization controls.
SeverityHigh
CVSS8.8
Exploit probability—
ProductG980H
PublishedSep 24, 2026
First seenSep 24, 2026
Weakness typeCWE-340CWE-340
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Botslab G980H | 30010_QHG980HN5294SysFW+, 58_QHG980HMCN5291SysFW+ | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.