VULNERABILITY INTELLIGENCE

CVE-2026-8989

CVSS score6.8 MEDIUM
EPSS probability0.24%
CISA KEVNot currently listed
Published2026-07-21
Last modified2026-10-24
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Autel Maxi Charger Single firmware through V1.03.51 permits unrestricted access to the NXP i.MX6 recovery mode through exposed hardware recovery pins. An attacker with physical access can boot attacker-controlled code in memory and modify or extract firmware and other sensitive data.

Weakness classification

  • office@cyberdanube.com: CWE-1191

Primary references