CVE-2026-8988

Autel Maxi Charger Single firmware through V1.03.51 exposes an accessible UART interface that permits interruption of the boot process and access to the U-Boot bootloader. An attacker with physical access can modify the boot configuration or file system to obtain operating system access...

CVE-2026-8988 Access to Bootloader

Autel Maxi Charger Single firmware through V1.03.51 exposes an accessible UART interface that permits interruption of the boot process and access to the U-Boot bootloader. An attacker with physical access can modify the boot configuration or file system to obtain operating system access...

CVE-2026-8988

CVE-2026-8988 affects Autel Maxi Charger Single firmware up to V1.03.51. A UART interface exposed on the device allows interruption of the boot process and access to the U-Boot bootloader. With physical access, an attacker can modify boot configuration or file system to obtain operating system ac...

PT-2026-62419

Name of the Vulnerable Software and Affected Versions Autel Maxi Charger Single versions prior to V1.03.52 Description The device exposes an accessible UART Universal Asynchronous Receiver-Transmitter, a hardware communication protocol interface. This allows an attacker with physical access to...

CVE-2026-36175

The GNCC GP5 (v7.1.76), a 2K indoor security camera, contains a vulnerability in its U-Boot component. A physically-proximate attacker can bypass authentication and obtain root access by interrupting the boot sequence and injecting a crafted string into the kernel boot arguments. No specific reme...

CVE-2026-36175

An issue in the U-Boot component of GNCC GP5 v7.1.76 allows physically-proximate attackers to bypass authentication and gain root access via interrupting the boot sequence and injecting a crafted string into the kernel boot arguments...

PT-2026-46244

An issue in the U-Boot component of GNCC GP5 v7.1.76 allows physically-proximate attackers to bypass authentication and gain root access via interrupting the boot sequence and injecting a crafted string into the kernel boot arguments...

CVE-2026-36175

An issue in the U-Boot component of GNCC GP5 v7.1.76 allows physically-proximate attackers to bypass authentication and gain root access via interrupting the boot sequence and injecting a crafted string into the kernel boot arguments...

TP-LINK Tapo C200 security vulnerabilities

The TP-LINK Tapo C200 is a webcam device from China P&L TP-LINK. A security vulnerability exists in TP-LINK Tapo C200 version V1, which stems from an access control issue that allows a physically proximate attacker to gain root access by connecting to the UART pin, interrupting the boot process,...

OKER G955V1 security vulnerabilities

OKER G955V1 is a wired headset from OKER. A security vulnerability exists in OKER G955V1 version v1.03.02.20161128. An attacker could exploit the vulnerability to interrupt the boot sequence and execute arbitrary commands with root privileges...

CVE-2021-27430

GE UR bootloader binary Version 7.00, 7.01 and 7.02 included unused hardcoded credentials. Additionally, a user with physical access to the UR IED can interrupt the boot sequence by rebooting the UR...