CVE-2026-82566: Botslab G980H Dashcams Insufficient session expiration
The Botslab G980H dash camera firmware contains a session management vulnerability in which authentication state can remain valid after the associated client connection has been terminated or replaced. Under certain connection conditions, a newly established connection can displace an existing client while previously established session state remains active until a separate expiration mechanism invalidates it. An unauthenticated attacker with adjacent network access could potentially take advantage of this residual authentication state to access functionality associated with another client's session.
Affected Software
Event History
Frequently Asked Questions
What network position does an attacker need?
The attacker needs adjacent network access to the dash camera. The issue is not described as requiring Internet access or prior authentication.
What could an attacker gain by exploiting the residual session state?
An attacker could potentially access functionality associated with another client's still-active session after that client's connection has been terminated or replaced.