CVE-2026-8988
Autel Maxi Charger Single firmware through V1.03.51 exposes an accessible UART interface that permits interruption of the boot process and a
CVSS
6.8
Medium
EPSS
0.2%
p13
KEV
—
Exploit Today
4
0-100
Published: Jul 21, 2026 · Last modified: Aug 13, 2026 · CWE-1191
0.1%EPSS · 30 days0.2%
2026-08-072026-09-04
Autel Maxi Charger Single firmware through V1.03.51 exposes an accessible UART interface that permits interruption of the boot process and access to the U-Boot bootloader. An attacker with physical access can modify the boot configuration or file system to obtain operating system access.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-15203—29.1%
——9Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to gain read/write access to internal values, upload and execute unsigned applications, and upload unsigned EEPROM data and firmware via exposed service interfaces and software update mechanisms2dCVE-2026-89896.8 MED19.7%
——6Autel Maxi Charger Single firmware through V1.03.51 permits unrestricted access to the NXP i.MX6 recovery mode through exposed hardware recovery pins. An attacker with physical access can boot attacker-controlled code in memory and modify or extract firmware and other sensitive data.23d