CVE-2026-87118
Last modified
CVE-2026-87118 is a medium-severity vulnerability rated 5.7/10 on the CVSS scale. The Botslab G980H dash camera firmware contains an out of bounds write vulnerability in its command processing functionality. An authenticated attacker with adjacent network access could submit crafted command data that corrupts memory, potentially disrupting authentication state or causing the affected process to terminate and the device to restart, resulting in a temporary denial of service.. EPSS estimates a 0.24% chance of exploitation in the next 30 days.
Description
The Botslab G980H dash camera firmware contains an out of bounds write vulnerability in its command processing functionality. An authenticated attacker with adjacent network access could submit crafted command data that corrupts memory, potentially disrupting authentication state or causing the affected process to terminate and the device to restart, resulting in a temporary denial of service.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Botslab | G980H | 30010_QHG980HN5294SysFW+; 58_QHG980HMCN5291SysFW+ |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-87118?
How severe is CVE-2026-87118?
How do I fix CVE-2026-87118?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-87105Tanium addressed a SQL injection vulnerability in Threat Res…8.8
- CVE-2026-87106Consul and Consul Enterprise are vulnerable to a denial of s…6.5
- CVE-2026-87107Consul and Consul Enterprise are vulnerable to an authorizat…5.4
- CVE-2026-8711NGINX JavaScript has a vulnerability when the js_fetch_proxy…9.8
- CVE-2026-87113Tanium addressed an improper access controls vulnerability i…6.3
- CVE-2026-87116Tanium addressed a server-side request forgery vulnerability…6.5
- CVE-2026-87119Authentication Bypass by Capture-replay in ZenHive mpp allow…8.2
- CVE-2026-8712Wyoming before 1.10.2 contains a server-side request forgery…8.3
- CVE-2026-87121lwIP TCP/IP Stack MQTT is vulnerable to an out-of-bounds wri…9.8
- CVE-2026-87122Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
- CVE-2026-87123hbs is an Express view engine wrapper for Handlebars. Versio…5.9
- CVE-2026-87124Vulnerability in the Oracle iRecruitment product of Oracle E…7.7
Are you affected by CVE-2026-87118?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
