CVE-2026-8982
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
Two undocumented privileged accounts exist in Autel Maxi Charger Single firmware through V1.03.51. The accounts use vendor-defined password derivation mechanisms based on device-specific values, allowing an attacker with knowledge of the algorithm and required inputs to authenticate to the web management interface with administrative privileges.
Risk Assessment
An attacker could gain full administrative control over the Autel Maxi Charger, potentially leading to manipulation of the charging process, data theft, or use of the device as an entry point into the network.
Recommendation
Update Autel Maxi Charger Single firmware to a version later than V1.03.51 and change default passwords.
Other vulnerabilities in Autel Maxi Charger Single
See all- CVE-2026-8986Critical
Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection when processing OCPP GetDiagnostics requests. A malicious or compromised OCPP server can supply a crafted diagnostics URL that results in arbitrary command execution on the charging station.
- CVE-2026-8985Critical
Autel Maxi Charger Single firmware up to version V1.03.51 is vulnerable to OS command injection via the /test endpoint on TCP port 9002. An unauthenticated attacker can supply crafted input in the url parameter to execute arbitrary system commands.
- CVE-2026-8989Medium
Autel Maxi Charger Single firmware up to version V1.03.51 allows unrestricted access to NXP i.MX6 recovery mode via exposed hardware pins. An attacker with physical access can boot arbitrary code in memory and modify or extract firmware and other sensitive data.
- CVE-2026-8988Medium
In Autel Maxi Charger Single firmware through V1.03.51, an accessible UART interface allows interruption of the boot process and access to the U-Boot bootloader. An attacker with physical access can modify boot configuration or file system to gain OS access.
- CVE-2026-8987High
Autel Maxi Charger Single firmware through V1.03.51 contains a heap-based buffer overflow in the set_ap_param command handled by the /localcfg endpoint. An authenticated attacker can supply oversized input, resulting in denial of service and potentially arbitrary code execution.
Original NVD description (English source)
Two undocumented privileged accounts exist in Autel Maxi Charger Single firmware through V1.03.51. The accounts use vendor-defined password derivation mechanisms based on device-specific values, allowing an attacker with knowledge of the algorithm and required inputs to authenticate to the web management interface with administrative privileges.