CVE-2026-88761 describes a vulnerability in the Botslab G980H dash camera firmware where the default WiFi password is generated from predictable device information, some of which is publicly advertised by the product. An attacker within WiFi range, without authentication, could perform limited guessing to determine the full password and access the device's network. This vulnerability is identified as CWE-1391 and affects firmware versions =30010_QHG980HN5294SysFW+ and =58_QHG980HMCN5291SysFW+. The CVSS v3.1 base score is 5.3, with an attack vector of adjacent network, high attack complexity, no privileges required, no user interaction, unchanged scope, and high confidentiality impact but no integrity or availability impact.

An unauthenticated attacker within WiFi range can potentially gain unauthorized access to the device's network by guessing the default WiFi password generated from predictable information. This could lead to exposure of network traffic or unauthorized control over the device's network functions. The confidentiality impact is rated high, while integrity and availability impacts are not affected.

No patch or official fix is currently documented for this vulnerability. Users should be aware of the risk of default password predictability and consider changing the default WiFi password to a strong, unique password if the device allows it. Monitor vendor advisories for any future updates or patches addressing this issue.