Autel Maxi Charger Single firmware through V1.03.51 permits unrestricted access to the NXP i.MX6 recovery mode through exposed hardware recovery pins. An attacker with physical access can boot attack…

Medium CVSS 6.8

CVECVE-2026-8989

First seen2026-08-13 15:16 UTC

Disclosed2026-07-21 22:19 UTC

Last updated2026-08-13 15:16 UTC

Channel statusauto

Summary

Autel Maxi Charger Single firmware through V1.03.51 permits unrestricted access to the NXP i.MX6 recovery mode through exposed hardware recovery pins. An attacker with physical access can boot attacker-controlled code in memory and modify or extract firmware and other sensitive data.

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

Sources

NVD DATABASE

Original Links

https://cyberdanube.com/security-research/multiple-vulnerabilities-in-autel-maxi-charger/ Third Party Advisory

Timeline

2026-08-13 nvd_ingest NVD