What’s Vulnerable › Vulnerabilities

CVE-2026-82585: Botslab G980H Dashcams Cleartext Transmission of Sensitive Information

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-24 · updated 2026-09-25
• Weakness: CWE-319

Description

The Botslab G980H dash camera firmware transmits sensitive information over unencrypted HTTP and RTSP connections. An attacker capable of intercepting communications on the device's WiFi network could obtain stored recordings, live video, location information, images, diagnostic logs, or other sensitive information exchanged between the device and its mobile application.

Affected products

• Botslab G980H: 30010_QHG980HN5294SysFW+, 58_QHG980HMCN5291SysFW+

References

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-267-01.json
• https://www.botslab.com/pages/about-botslab
• https://www.cisa.gov/news-events/ics-advisories/icsa-26-267-01

Get alerted when CVE-2026-82585 or the next vulnerability affects your stack