Vulnerability · Published Sep 24, 2026 · Assigned by icscert
CVE-2026-82708Botslab G980H Dashcams Improper Limitation of a Pathname to a Restricted Directory
Medium 6.5
In plain English
A medium-severity path traversal in G980H from Botslab. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 12% of all known vulnerabilities).
Official description
The Botslab G980H dash camera firmware contains a path traversal vulnerability in its HTTP server. An attacker with access to the device's WiFi network could submit a crafted request to access files within the device's removable storage that were not intended to be directly accessible through the web server. Exposed files could include recordings, images, diagnostic logs, or firmware files.
Affected products (as reported)
Weakness: CWE-22 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N