PT-2026-62121 · Autel · Maxicharger Single

D. Blagojevic + 3 · CVE-2026-8983 · Published 2026-07-21 · Updated 2026-07-21

Mitre

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Autel Maxi Charger Single firmware through V1.03.51 contains a hard-coded authentication token that bypasses authorization checks for multiple management endpoints. An attacker can supply the special token value to invoke privileged functionality without valid authentication.

Exploit

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2026-8983

Affected Products

Maxicharger Single

References · 2

• 🔥 https://cyberdanube.com/security-research/multiple-vulnerabilities-in-autel-maxi-charger · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-8983 · Security Note