CVE-2026-82566

The Botslab G980H dash camera firmware contains a session management vulnerability in which authentication state can remain valid after the associated client connection has been terminated or replaced. Under certain connection conditions, a newly established connection can displace an existing client while previously established session state remains active until a separate expiration mechanism invalidates it. An unauthenticated attacker with adjacent network access could potentially take advantage of this residual authentication state to access functionality associated with another client's session.

• CWE-613

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-267-01.json
• https://www.botslab.com/pages/about-botslab
• https://www.cisa.gov/news-events/ics-advisories/icsa-26-267-01

Published

Sep 24, 2026

Last Modified

Sep 24, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-8256A security vulnerability has been detected in Devs Palace ER…2.4
• CVE-2026-82560Pod::Text versions before 6.1.1 for Perl allow CPU and memor…7.5
• CVE-2026-82561Apache NiFi 1.5.0 through 2.11.0 provide REST API methods th…6.5
• CVE-2026-82562### Summary When `qs.parse` is called with `comma: true` …3.7
• CVE-2026-82563An attacker could impersonate the camera and place themselve…7.6
• CVE-2026-82564Authorization Bypass Through User-Controlled Key vulnerabili…7.1
• CVE-2026-82567The myPRO Manager notification gateway exposes an unauthenti…6.3
• CVE-2026-8257A vulnerability was detected in WebAssembly Binaryen up to 1…5.5
• CVE-2026-82578When XML batch processing is turned on and the XPath option …7.5
• CVE-2026-82579Loop with Unreachable Exit Condition (Infinite Loop) vulnera…6
• CVE-2026-8258A flaw has been found in Squirrel up to 3.2. Impacted is the…5.3
• CVE-2026-82580Generation of Error Message Containing Sensitive Information…5.3