CyberSecBulletin

Botslab vulnerabilities

We track 5 vulnerabilities in Botslab products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on September 24, 2026.

5vulnerabilities
0critical
5high
0exploited
8.5average CVSS score

Latest Botslab vulnerabilities

  • 8.1 High severity

    G980H: Insufficient Verification of Data Authenticity

    CVE-2026-81630Botslab

    The Botslab G980H dash camera firmware does not adequately verify the authenticity of firmware updates. The update process retrieves firmware through an unprotected connection and relies on an integrity value supplied with the firmware instead of a trusted cry

  • 8.8 High severity

    G980H: Generation of Predictable Numbers or Identifiers

    CVE-2026-85496Botslab

    The Botslab G980H dash camera firmware generates session identifiers using a small sequential value space rather than a suitably unpredictable source. An unauthenticated attacker with adjacent network access and knowledge that an active session exists could po

  • 8.8 High severity

    G980H: Incorrect Authorization

    CVE-2026-84399Botslab

    The Botslab G980H dash camera firmware contains an authorization vulnerability in its session based command functionality. The product does not sufficiently associate an authenticated session with the client connection that established it, and subsequent privi

  • 8.8 High severity

    The Botslab G980H dash camera firmware contains a session management vulnerability in which…

    CVE-2026-82566Botslab

    The Botslab G980H dash camera firmware contains a session management vulnerability in which authentication state can remain valid after the associated client connection has been terminated or replaced. Under certain connection conditions, a newly established c

  • 8.1 High severity

    G980H: Authentication Bypass by Capture-replay

    CVE-2026-77967Botslab

    The Botslab G980H dash camera firmware accepts a reusable authentication value without adequately verifying its freshness or association with the requesting client. An unauthenticated attacker with adjacent network access who captures a valid authentication va