CVE-2026-82566 | BDVDB-2026-378632 Detail

Description#

The Botslab G980H dash camera firmware contains a session management vulnerability in which authentication state can remain valid after the associated client connection has been terminated or replaced. Under certain connection conditions, a newly established connection can displace an existing client while previously established session state remains active until a separate expiration mechanism invalidates it. An unauthenticated attacker with adjacent network access could potentially take advantage of this residual authentication state to access functionality associated with another client's session.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-09-24Record published in the CVE List.