Predictable WiFi Password Vulnerability in Botslab G980H Dash Camera
CVE-2026-88761

6MEDIUM

Key Information:

Vendor

Botslab

Status
Vendor
CVE Published:
24 September 2026

What is CVE-2026-88761?

The Botslab G980H dash camera firmware has a vulnerability that stems from its method of generating default WiFi passwords using easily guessed device information. Portions of this information are publicly available, allowing an unauthenticated attacker within WiFi range to exploit the security flaw. By using limited guessing techniques, the attacker could potentially reconstruct the entire WiFi password and gain unauthorized access to the device's network, leading to possible privacy breaches and network compromise.

Affected Version(s)

G980H 30010_QHG980HN5294SysFW+

G980H 58_QHG980HMCN5291SysFW+

References

CVSS V4

Score:
6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Julian of Software Secured reported this vulnerability to CISA.
.