CVE-2026-82585 describes a vulnerability in the Botslab G980H dash camera firmware where sensitive information is transmitted in cleartext over unencrypted HTTP and RTSP connections. An attacker with network access to the device's WiFi could intercept communications between the dash camera and its mobile application, potentially obtaining stored recordings, live video feeds, location data, images, diagnostic logs, and other sensitive information. The vulnerability is identified as CWE-319 (Cleartext Transmission of Sensitive Information). The CVSS 4.0 base score is 7.1 (high severity), reflecting the ease of attack and the impact of data exposure. The affected versions are exactly =30010_QHG980HN5294SysFW+ and =58_QHG980HMCN5291SysFW+. There is no information about available patches or vendor advisories indicating remediation.

An attacker capable of intercepting network traffic on the dash camera's WiFi network can access sensitive information including stored and live video recordings, location data, images, and diagnostic logs. This exposure could compromise user privacy and security by revealing potentially sensitive visual and location data. There is no indication of privilege requirements or user interaction needed for exploitation, increasing the risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should minimize exposure by securing the WiFi network with strong encryption and access controls to prevent unauthorized interception. Avoid using untrusted networks with the device and monitor for any vendor updates addressing this issue.