CVE-2026-8987 | BDVDB-2026-350167 Detail

Description#

Autel Maxi Charger Single firmware through V1.03.51 contains a heap-based buffer overflow in the set_ap_param command handled by the /localcfg endpoint. An authenticated attacker can supply oversized input, resulting in denial of service and potentially arbitrary code execution.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-07-21Record published in the CVE List.
2. Version 22026-07-22Most recent update recorded in the CVE List.