CVE-2026-85496: falha de alta gravidade em Botslab G980H
Botslab G980H Dashcams Generation of Predictable Numbers or Identifiers
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.7epss 0.3%
The Botslab G980H dash camera firmware generates session identifiers using a small sequential value space rather than a suitably unpredictable source. An unauthenticated attacker with adjacent network access and knowledge that an active session exists could potentially determine a valid session identifier and use it to bypass intended authorization controls.
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Botslab · G980HCVEs relacionadas — Botslab G980H
No mesmo produto, das mais perigosas para as menos.
CVE-2026-82566HIGHBotslab G980H Dashcams Insufficient session expirationEPSS 0.3%CVE-2026-87118MEDIUMBotslab G980H Dashcams Out-of-bounds WriteEPSS 0.2%CVE-2026-77967HIGHBotslab G980H Dashcams Authentication Bypass by Capture-replayEPSS 0.2%CVE-2026-88956HIGHBotslab G980H Dashcams Missing Authentication for Critical FunctionEPSS 0.2%CVE-2026-82708HIGHBotslab G980H Dashcams Improper Limitation of a Pathname to a Restricted DirectoryEPSS 0.2%CVE-2026-81630CRITICALBotslab G980H Dashcams Insufficient Verification of Data AuthenticityEPSS 0.2%