← Database

CVE-2026-8986

CRITICAL CVSS: 9.8 Published: 2026-07-21 Modified: 2026-08-13

Description

Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection when processing OCPP GetDiagnostics requests. A malicious or compromised OCPP server can supply a crafted diagnostics URL that results in arbitrary command execution on the charging station.

Affected Platforms

Autel Maxicharger Single Charger FirmwareAutel Maxicharger Single Charger

Weakness Type

CWE-78

References