EXPOSURES › CVE-2026-8985

CVE-2026-8985

CRITICAL

DETAIL

SourceNVD · cve Published2026-07-21 CVSS9.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-8985 ↗

▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.

PLAYERS IMPLICATED

autel · vendor maxicharger single charger · product maxicharger single charger firmware · product

DESCRIPTION

Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection in the /test endpoint exposed on TCP port 9002. An unauthenticated attacker can supply crafted input in the url parameter to execute arbitrary operating system commands.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.