CVE-2026-8987 Autel CVE debrief

Who should care

Organizations using Autel Maxi Charger Single firmware through V1.03.51 should prioritize patching this vulnerability to prevent potential denial of service and arbitrary code execution attacks. The vulnerability can be exploited by an authenticated attacker, and it is recommended to apply the latest firmware update to patch the vulnerability. Security teams should review the CVE record and NVD entry for the most up-to-date information on this vulnerability.

Technical summary

The vulnerability is caused by a heap-based buffer overflow in the set_ap_param command handled by the /localcfg endpoint. This allows an authenticated attacker to supply oversized input, potentially leading to denial of service and arbitrary code execution. The affected product is Autel Maxi Charger Single firmware through V1.03.51. The CVSS score is 9.4, indicating a critical severity. The vulnerability can be exploited by an authenticated attacker, and it is recommended to apply the latest firmware update to patch the vulnerability.

Defensive priority

High

Recommended defensive actions

• Apply the latest firmware update (V1.03.51 or later) to patch the vulnerability
• Restrict access to the /localcfg endpoint to only trusted users
• Monitor for suspicious activity on the Autel Maxi Charger Single device
• Consider implementing additional security controls, such as input validation and intrusion detection
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record was published on 2026-07-21T22:19:11.143Z and has been modified since then. The NVD entry is currently Awaiting Analysis. A source reference from Cyberdanube provides additional information about the vulnerability. The evidence is limited, and defenders should verify the affected scope and severity with the vendor. The CVE record and NVD entry provide the most up-to-date information on this vulnerability.

Official resources