CVE-2026-8983 Details

A backdoor authentication token vulnerability has been identified in Autel Maxi Charger Single firmware through V1.03.51. This vulnerability allows an attacker to bypass authorization checks for multiple management endpoints by supplying a hard-coded token value. Exploitation of this vulnerability enables access to privileged functionalities and the ability to modify device configurations without valid authentication.

Users are advised to update to the latest available version and restrict network access to the devices. Additionally, physical access should be limited, as there are vulnerabilities that can be exploited with direct access to the device.