CVE-2026-82566 — Botslab G980H Dashcams Insufficient session expiration
The Botslab G980H dash camera firmware contains a session management vulnerability in which authentication state can remain valid after the associated client connection has been…
Published: 2026-09-24 · CVSS: 8.7 · CVSS 4.0
The Botslab G980H dash camera firmware contains a session management vulnerability in which authentication state can remain valid after the associated client connection has been terminated or replaced. Under certain connection conditions, a newly established connection can displace an existing client while previously established session state remains active until a separate expiration mechanism invalidates it. An unauthenticated attacker with adjacent network access could potentially take advantage of this residual authentication state to access functionality associated with another client's session.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7