CVE-2026-85496: Botslab G980H Dashcams Generation of Predictable Numbers or Identifiers

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-24 · updated 2026-09-25
Weakness: CWE-340

Description

The Botslab G980H dash camera firmware generates session identifiers using a small sequential value space rather than a suitably unpredictable source. An unauthenticated attacker with adjacent network access and knowledge that an active session exists could potentially determine a valid session identifier and use it to bypass intended authorization controls.

Affected products

Botslab G980H: 30010_QHG980HN5294SysFW+, 58_QHG980HMCN5291SysFW+

References

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-267-01.json
https://www.botslab.com/pages/about-botslab
https://www.cisa.gov/news-events/ics-advisories/icsa-26-267-01

Get alerted when CVE-2026-85496 or the next vulnerability affects your stack