CVE-2026-8984 Autel CVE debrief

Who should care

Organizations using Autel Maxi Charger Single firmware through V1.03.51 should prioritize patching this vulnerability to prevent potential remote code execution attacks. Operators, platform administrators, vulnerability management teams, and security teams should review the affected scope and take necessary actions.

Technical summary

The vulnerability is caused by a service listening on TCP port 9002 in Autel Maxi Charger Single firmware through V1.03.51. An unauthenticated attacker can exploit this vulnerability by sending a crafted request to the /test endpoint, which can lead to the download, extraction, and execution of attacker-controlled files with root privileges. The affected product is Autel Maxi Charger Single firmware through V1.03.51.

Defensive priority

High

Recommended defensive actions

• Apply the latest firmware update (V1.03.52 or later) to patch the vulnerability.
• Restrict access to TCP port 9002 to only trusted networks or systems.
• Monitor network traffic to detect potential exploitation attempts.
• Implement additional security controls, such as intrusion detection and prevention systems.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The CVE record was published on 2026-07-21T22:19:10.770Z and was last modified on 2026-07-22T20:17:09.170Z. The NVD entry is currently Awaiting Analysis. The vulnerability affects Autel Maxi Charger Single firmware through V1.03.51, and defenders should verify the affected scope and vendor guidance.

Official resources