CVE Watch21 jul 2026

CVE-2026-8988

Autel Maxi Charger Single firmware through V1.03.51 exposes an accessible UART interface that permits interruption of the boot process and a

CVSS

—

Sin CVSS

EPSS

—

KEV

—

Exploit Today

0-100

Publicado: 21 jul 2026 · Última mod.: 21 jul 2026 · CWE-1191

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Autel Maxi Charger Single firmware through V1.03.51 exposes an accessible UART interface that permits interruption of the boot process and access to the U-Boot bootloader. An attacker with physical access can modify the boot configuration or file system to obtain operating system access.

Referencias oficiales

cyberdanube.comhttps://cyberdanube.com/security-research/multiple-vulnerabilities-in-autel-maxi-charger/

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-8989—

—

——0Autel Maxi Charger Single firmware through V1.03.51 permits unrestricted access to the NXP i.MX6 recovery mode through exposed hardware recovery pins. An attacker with physical access can boot attacker-controlled code in memory and modify or extract firmware and other sensitive data.13h