Lucene search
+L

127 matches found

NVD
NVD
•added 2026/09/24 8:17 p.m.•11 views

CVE-2026-82566

The Botslab G980H dash camera firmware contains a session management vulnerability in which authentication state can remain valid after the associated client connection has been terminated or replaced. Under certain connection conditions, a newly established connection can displace an existing...

8.8CVSS0.00277EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/24 8:17 p.m.•11 views

CVE-2026-84399

The Botslab G980H dash camera firmware contains an authorization vulnerability in its session based command functionality. The product does not sufficiently associate an authenticated session with the client connection that established it, and subsequent privileged operations rely on possession o...

8.8CVSS0.00194EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/24 8:17 p.m.•11 views

CVE-2026-85496

The Botslab G980H dash camera firmware generates session identifiers using a small sequential value space rather than a suitably unpredictable source. An unauthenticated attacker with adjacent network access and knowledge that an active session exists could potentially determine a valid session...

8.8CVSS0.0025EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/24 8:17 p.m.•11 views

CVE-2026-77967

The Botslab G980H dash camera firmware accepts a reusable authentication value without adequately verifying its freshness or association with the requesting client. An unauthenticated attacker with adjacent network access who captures a valid authentication value could replay it from another clie...

8.6CVSS0.00235EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/24 7:47 p.m.•9 views

EUVD-2026-86450

The Botslab G980H dash camera firmware generates session identifiers using a small sequential value space rather than a suitably unpredictable source. An unauthenticated attacker with adjacent network access and knowledge that an active session exists could potentially determine a valid session...

8.8CVSS5.7AI score0.0025EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/09/24 7:47 p.m.•35 views

CVE-2026-85496 Botslab G980H Dashcams Generation of Predictable Numbers or Identifiers

The Botslab G980H dash camera firmware generates session identifiers using a small sequential value space rather than a suitably unpredictable source. An unauthenticated attacker with adjacent network access and knowledge that an active session exists could potentially determine a valid session...

8.8CVSS0.0025EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/24 7:32 p.m.•9 views

EUVD-2026-86447

The Botslab G980H dash camera firmware contains a session management vulnerability in which authentication state can remain valid after the associated client connection has been terminated or replaced. Under certain connection conditions, a newly established connection can displace an existing...

8.8CVSS5.8AI score0.00277EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/24 7:32 p.m.•12 views

CVE-2026-82566

The Botslab G980H dash camera firmware is vulnerable to an insufficient session expiration flaw. The root cause is a session management defect where an authentication state remains valid even after a client connection is terminated or replaced. Specifically, a new connection may displace an exist...

8.8CVSS5.8AI score0.00277EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/09/24 7:32 p.m.•33 views

CVE-2026-82566 Botslab G980H Dashcams Insufficient session expiration

The Botslab G980H dash camera firmware contains a session management vulnerability in which authentication state can remain valid after the associated client connection has been terminated or replaced. Under certain connection conditions, a newly established connection can displace an existing...

8.8CVSS0.00277EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/24 7:27 p.m.•8 views

EUVD-2026-86412

The Botslab G980H dash camera firmware contains an authorization vulnerability in its session based command functionality. The product does not sufficiently associate an authenticated session with the client connection that established it, and subsequent privileged operations rely on possession o...

8.8CVSS5.8AI score0.00194EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/24 7:27 p.m.•33 views

CVE-2026-84399 Botslab G980H Dashcams Incorrect Authorization

The Botslab G980H dash camera firmware contains an authorization vulnerability in its session based command functionality. The product does not sufficiently associate an authenticated session with the client connection that established it, and subsequent privileged operations rely on possession o...

8.8CVSS0.00194EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/24 7:27 p.m.•15 views

CVE-2026-84399

The Botslab G980H dash camera firmware contains an authorization vulnerability within its session-based command functionality. The root cause is the product's failure to sufficiently associate an authenticated session with the specific client connection that established it. Because subsequent pri...

8.8CVSS5.8AI score0.00194EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/24 7:17 p.m.•8 views

CVE-2026-82157

Dell ThinOS 10, versions prior to SecurityAddon2605.10.2766T10, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Protection mechanism bypass and Unauthorized access...

8.3CVSS0.00121EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/24 6:39 p.m.•35 views

CVE-2026-82157

Dell ThinOS 10, versions prior to SecurityAddon2605.10.2766T10, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Protection mechanism bypass and Unauthorized access...

8.3CVSS0.00121EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/23 3:17 p.m.•9 views

CVE-2026-73586

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Insufficient Session Expiration vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Elevation of privileges, Protection mechanism...

6.4CVSS0.00111EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/23 3:17 p.m.•9 views

CVE-2026-73587

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering,...

6.8CVSS0.00084EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/23 2:21 p.m.•9 views

EUVD-2026-85312

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering,...

6.8CVSS5.8AI score0.00084EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/23 2:21 p.m.•40 views

CVE-2026-73587

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering,...

6.8CVSS0.00084EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/23 2:21 p.m.•4 views

CVE-2026-73587

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are affected by an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could exploit this flaw to cause Information disclosure , Information tampering , and a Protecti...

6.8CVSS5.8AI score0.00084EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/23 12:00 a.m.•5 views

CVE-2026-73586: Insufficient Session Expiration

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Insufficient Session Expiration vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Elevation of privileges, Protection mechanism...

6.4CVSS5.8AI score0.00111EPSS
SaveExploits0References3
Rows per page
Query Builder