PT-2026-62121 · Autel · Maxicharger Single

D. Blagojevic + 3 · CVE-2026-8983 · Publicado 2026-07-21 · Atualizado 2026-07-21

Mitre

CVSS v4.0

10

Crítica

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Autel Maxi Charger Single firmware through V1.03.51 contains a hard-coded authentication token that bypasses authorization checks for multiple management endpoints. An attacker can supply the special token value to invoke privileged functionality without valid authentication.

Exploit

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2026-8983

Produtos afetados

Maxicharger Single

Referências · 2

• 🔥 https://cyberdanube.com/security-research/multiple-vulnerabilities-in-autel-maxi-charger · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-8983 · Nota de Segurança