CVE-2026-82566
8.8 HIGHpublic exploit availablePublished 2026-09-24 · Updated 2026-09-24
AI risk analysis
- Summary
- The flaw in the Botslab G980H dash camera firmware allows an unauthenticated attacker to exploit residual authentication state, gaining unauthorized access to another client's session.
- Exploitability
- Exploitation is moderately difficult requiring adjacent network access and specific connection conditions to displace an existing client.
- Blast radius
- If exploited, the attacker could gain full access to the displaced client's session, potentially leading to data theft or control of the camera's functionality.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Disable the affected feature or upgrade to the latest firmware version as soon as possible.
Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
The Botslab G980H dash camera firmware contains a session management vulnerability in which authentication state can remain valid after the associated client connection has been terminated or replaced. Under certain connection conditions, a newly established connection can displace an existing client while previously established session state remains active until a separate expiration mechanism invalidates it. An unauthenticated attacker with adjacent network access could potentially take advantage of this residual authentication state to access functionality associated with another client's session.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-613
Public exploit & PoC references
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- CRITICALCVE-2026-100291
- CRITICALCVE-2026-101000PoC
- CRITICALCVE-2026-101077PoC
- HIGHCVE-2026-18810PoC
- CRITICALCVE-2026-20234
- HIGHCVE-2026-24079
- HIGHCVE-2026-58197PoC
- CRITICALCVE-2026-59163PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.