Is CVE-2026-77967 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-77967 being exploited in the wild.

How severe is CVE-2026-77967?

High severity, with a CVSS score of 8.1, published 24 September 2026.

Is there a fix for CVE-2026-77967?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-77967 attacked?

It is attacked from the adjacent network or over the network, in a network appliance.

Am I affected by CVE-2026-77967?

Check whether you run Botslab G980H at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-77967: Botslab G980H authentication token replay in firmware

CVE-2026-77967 · Severity: high · CVSS 8.1 · Published 2026-09-24

The Botslab G980H dash camera firmware fails to validate whether authentication tokens are fresh or tied to a specific client session. An attacker on the same network who intercepts a valid authentication token from one device can reuse it to gain authenticated access from a different device, allowing them to access privileged camera functions and potentially view or manipulate dash camera recordings.

Technologies: Botslab G980H. Vendors: Botslab.

Quick answers

Is CVE-2026-77967 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-77967 being exploited in the wild.
How severe is CVE-2026-77967?: High severity, with a CVSS score of 8.1, published 24 September 2026.
Which products and versions are affected?: Botslab G980H <UNKNOWN>.
Is there a fix for CVE-2026-77967?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-77967 attacked?: It is attacked from the adjacent network or over the network, in a network appliance.
Am I affected by CVE-2026-77967?: Check whether you run Botslab G980H at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The firmware accepts reusable authentication values without verifying freshness (timestamp or nonce) or binding to the requesting client identity, enabling replay attacks. An unauthenticated attacker with adjacent network access can capture a valid authentication token and replay it to establish an authenticated session with privileged access. A fix is confirmed to exist (CVE designation issued).

Affected products

Botslab G980H <UNKNOWN>

Timeline

2026-09-24: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.