CVE-2026-75558

Botslab G980H Dashcams Use of Hard-coded Cryptographic Key

CVSS 6 medium · Botslab G980H · published 2026-09-24

The Botslab G980H dash camera firmware uses a hard-coded cryptographic key and initialization vector to protect WiFi credentials communicated by the device. An attacker who obtains the protected credential and extracts the cryptographic material from the firmware could recover the WiFi password and gain unauthorized access to the device network.

NVD · CVE.org

Coverage 1 source

1. 2026-09-24 CISA Cybersecurity Advisories high Botslab G980H Dashcams

   Multiple vulnerabilities in Botslab G980H Dashcams could allow attackers to bypass authentication and gain unauthorized access.

Mentioned with

CVE-2026-77967 CVE-2026-82566 CVE-2026-82716 CVE-2026-84399 CVE-2026-84403 CVE-2026-85496 CVE-2026-88761

Also covered

• CVE-2026-86950 Apple iOS and iPadOS CVSS 8.8 · 1 article · 2026-09-29
• CVE-2023-6548 Cloud Software Group NetScaler ADC CVSS 5.5 · 1 article · 2026-09-28
• CVE-2023-25608 Fortinet FortiAP-W2 CVSS 5.2 · 1 article · 2026-09-28
• CVE-2026-88772 Memory overflow vulnerability leading to Remote Code Execution or Denial of Service CVSS 9.5 · 3 articles · 2026-09-28
• CVE-2026-88771 A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands CVSS 9.5 · 3 articles · 2026-09-28