← Back to search

CVE-2026-82566

8.8 HIGHpublic exploit available

Published 2026-09-24 · Updated 2026-09-24

AI risk analysis

Summary
The flaw in the Botslab G980H dash camera firmware allows an unauthenticated attacker to exploit residual authentication state, gaining unauthorized access to another client's session.
Exploitability
Exploitation is moderately difficult requiring adjacent network access and specific connection conditions to displace an existing client.
Blast radius
If exploited, the attacker could gain full access to the displaced client's session, potentially leading to data theft or control of the camera's functionality.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Disable the affected feature or upgrade to the latest firmware version as soon as possible.
auth-bypassfirmwarenetwork

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

The Botslab G980H dash camera firmware contains a session management vulnerability in which authentication state can remain valid after the associated client connection has been terminated or replaced. Under certain connection conditions, a newly established connection can displace an existing client while previously established session state remains active until a separate expiration mechanism invalidates it. An unauthenticated attacker with adjacent network access could potentially take advantage of this residual authentication state to access functionality associated with another client's session.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-613

Public exploit & PoC references

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.