CVE-2026-84403 — Botslab G980H Dashcams Missing Authentication for Critical Function
The Botslab G980H dash camera firmware does not require authenticated pairing or client binding before permitting access to Bluetooth Low Energy communications and GATT characte…
Published: 2026-09-24 · CVSS: 6.9 · CVSS 4.0
The Botslab G980H dash camera firmware does not require authenticated pairing or client binding before permitting access to Bluetooth Low Energy communications and GATT characteristics. An unauthenticated attacker within Bluetooth range could intercept or directly retrieve sensitive device information, including device identifiers, firmware information, and protected WiFi credentials.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7