CVE-2026-8982 in MaxiCharger Single
Riassunto
di MITRE • 22/07/2026
Two undocumented privileged accounts exist in Autel Maxi Charger Single firmware through V1.03.51. The accounts use vendor-defined password derivation mechanisms based on device-specific values, allowing an attacker with knowledge of the algorithm and required inputs to authenticate to the web management interface with administrative privileges.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.