CVE-2026-8988
Medium · 6.8CVSS
6.8
EPSS
0.2%
Published
Jul 21, 2026
CISA due date
—
The record
Autel Maxi Charger Single firmware through V1.03.51 exposes an accessible UART interface that permits interruption of the boot process and access to the U-Boot bootloader. An attacker with physical access can modify the boot configuration or file system to obtain operating system access.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-15203 Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP… CWE-1191
- CVE-2026-8989 Autel Maxi Charger Single firmware through V1.03.51 permits unrestricted access to the… CWE-1191
- CVE-2025-52533 Improper Access Control in an on-chip debug interface could allow a privileged attacker… CWE-1191
- CVE-2024-36319 Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a… CWE-1191
- CVE-2025-15083 A vulnerability was determined in TOZED ZLT M30s up to 1.47. CWE-1191
- CVE-2025-36755 The CleverDisplay BlueOne hardware player is designed with its USB interfaces physically… CWE-1191