CVE-2026-88956

Name of the Vulnerable Software and Affected Versions Botslab G980H (affected versions not specified)

Description The firmware contains an authentication flaw in the root account accessible via the UART (Universal Asynchronous Receiver-Transmitter, a hardware communication protocol) interface. This account allows access to a privileged system interface without requiring a password. Additionally, the interface reveals the device WiFi password during the startup process. An attacker with physical access to the hardware can use the UART interface to gain root privileges and retrieve the WiFi password.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.