CVE-2026-79959: high-severity vulnerability in Botslab G980H
Botslab G980H Dashcams Use of Hard-coded Credentials
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7epss 0.2%
The Botslab G980H dash camera firmware contains a hard-coded root account password that cannot be changed by the user. An attacker who obtains the firmware or has physical access to the device could recover the credential and use it to obtain root access through the UART interface.
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Botslab · G980HRelated CVEs — Botslab G980H
In the same product, most dangerous first.
CVE-2026-82566HIGHBotslab G980H Dashcams Insufficient session expirationEPSS 0.3%CVE-2026-85496HIGHBotslab G980H Dashcams Generation of Predictable Numbers or IdentifiersEPSS 0.3%CVE-2026-87118MEDIUMBotslab G980H Dashcams Out-of-bounds WriteEPSS 0.2%CVE-2026-77967HIGHBotslab G980H Dashcams Authentication Bypass by Capture-replayEPSS 0.2%CVE-2026-88956HIGHBotslab G980H Dashcams Missing Authentication for Critical FunctionEPSS 0.2%CVE-2026-82708HIGHBotslab G980H Dashcams Improper Limitation of a Pathname to a Restricted DirectoryEPSS 0.2%