Session Management Vulnerability in Botslab G980H Dash Camera Firmware

CVE-2026-82566

What is CVE-2026-82566?

The Botslab G980H dash camera firmware has a session management flaw that allows an authentication state to persist after the associated client connection has been terminated. This means that under specific connection conditions, a new connection can mistakenly assume an existing session, remaining active until it is invalidated through a separate expiration mechanism. An unauthenticated attacker with adjacent network access could exploit this flaw, potentially gaining unauthorized access to the functions associated with another user's session. This poses significant security risks for users, making it critical to implement appropriate defensive measures.

References