CVE-2026-8983
CriticalCVSS 10.0Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
Autel Maxi Charger Single firmware up to version V1.03.51 contains a hard-coded authentication token that bypasses authorization checks for multiple management endpoints. An attacker can use this token to invoke privileged functionality without valid authentication.
Risk Assessment
High risk – an attacker can gain unauthorized access to charger management functions, potentially leading to device manipulation or disruption.
Recommendation
Update the firmware to the latest version that removes the hard-coded token. If no update is available, restrict network access to the device.
Original NVD description (English source)
Autel Maxi Charger Single firmware through V1.03.51 contains a hard-coded authentication token that bypasses authorization checks for multiple management endpoints. An attacker can supply the special token value to invoke privileged functionality without valid authentication.