CVE-2026-88761CWE-1391

CVE-2026-88761

Medium · published September 25, 2026

CVSS v3.1
5.3
EPSS
0%
Percentile
5.9
In the wild
Unconfirmed
What it is

The Botslab G980H dash camera firmware generates the default WiFi password using predictable device information, portions of which are advertised by the product. An unauthenticated attacker within WiFi range could potentially determine the remaining password characters through limited guessing and gain unauthorized access to the device network.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
6.0 · CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00169 · 5.9th percentile
Weakness
CWE-1391 · Use of Weak Credentials
Published
2026-09-25T00:17Z
References (3)
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-267-01.json · [email protected]https://www.botslab.com/pages/about-botslab · [email protected]https://www.cisa.gov/news-events/ics-advisories/icsa-26-267-01 · [email protected]
EPSS history
Timeline
  • 26 SEP 03:27Z
    EPSS moved — → 0%
    epss
  • 24 SEP 19:55Z
    Botslab G980H Dashcams Use of Weak Credentials
    cvelistv5