Bluetooth Vulnerability in Botslab G980H Dash Camera Firmware
CVE-2026-84403

6.9MEDIUM

Key Information:

Vendor

Botslab

Status
G980h
Vendor
CVE Published:
24 September 2026

What is CVE-2026-84403?

The firmware of the Botslab G980H dash camera lacks proper authentication mechanisms for Bluetooth Low Energy communications. This security oversight allows unauthorized attackers within Bluetooth range to access GATT characteristics. They can intercept or retrieve sensitive information such as device identifiers, firmware details, and secured WiFi credentials, thus posing a significant risk to user privacy and device integrity.

Affected Version(s)

G980H 30010_QHG980HN5294SysFW+

G980H 58_QHG980HMCN5291SysFW+

References

https://www.botslab.com/pages/about-botslab
https://www.cisa.gov/news-events/ics-advisories/icsa-26-2...
https://github.com/cisagov/CSAF/blob/develop/csaf_files/O...

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Julian of Software Secured reported this vulnerability to CISA.
.