CVE-2026-8983

Received Received - Intake

Hard-Coded Authentication Token in Autel Maxi Charger Single Firmware

Publication date: 2026-07-21

Last updated on: 2026-07-21

Assigner: CyberDanube

Description

Autel Maxi Charger Single firmware through V1.03.51 contains a hard-coded authentication token that bypasses authorization checks for multiple management endpoints. An attacker can supply the special token value to invoke privileged functionality without valid authentication.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-21

Last Modified

2026-07-21

Generated

2026-07-22

AI Q&A

2026-07-22

EPSS Evaluated

N/A

NVD

CVE-2026-8983

Affected Vendors & Products

Vendor	Product	Version / Range
autel	maxi_charger_single	to 1.03.51 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-798	The product contains hard-coded credentials, such as a password or cryptographic key.

Attack-Flow Graph

Executive Summary

This vulnerability involves a hard-coded authentication token in Autel Maxi Charger Single firmware through V1.03.51. The token bypasses authorization checks for management endpoints, allowing attackers to invoke privileged functions without valid authentication.

Impact Analysis

An attacker could exploit this to gain unauthorized access to privileged functions, potentially controlling the device, modifying settings, or accessing sensitive data without proper authentication.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating confidentiality requirements in GDPR and HIPAA. Non-compliance may result in legal penalties and reputational damage.

Mitigation Strategies

Immediately update the Autel Maxi Charger Single firmware to the latest version to remove the hard-coded authentication token. If an update is not available, isolate the device from the network to prevent unauthorized access.

Hi! I’m here to help you understand CVE-2026-8983. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70