CVE-2026-82716CWE-532

CVE-2026-82716

Medium · published September 25, 2026

CVSS v3.1
4.6
EPSS
0%
Percentile
5.9
In the wild
Unconfirmed
What it is

The Botslab G980H dash camera firmware includes sensitive configuration information, including WiFi credentials, in diagnostic logs generated during the support process. These logs remain accessible on removable storage after the support operation has completed. An unauthenticated attacker with physical access to the storage media could retrieve the logs and obtain sensitive device information.

The record
Technical detail
CVSS v3.1
4.6 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
5.1 · CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00169 · 5.9th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2026-09-25T01:18Z
References (3)
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-267-01.json · [email protected]https://www.botslab.com/pages/about-botslab · [email protected]https://www.cisa.gov/news-events/ics-advisories/icsa-26-267-01 · [email protected]
EPSS history
Timeline
  • 26 SEP 03:27Z
    EPSS moved — → 0%
    epss
  • 24 SEP 20:02Z
    Botslab G980H Dashcams Insertion of Sensitive Information into Log File
    cvelistv5