CVE-2026-8987: Authenticated Heap Overflow
Autel Maxi Charger Single firmware through V1.03.51 contains a heap-based buffer overflow in the setapparam command handled by the /localcfg endpoint. An authenticated attacker can supply oversized input, resulting in denial of service and potentially arbitrary code execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8987?
The severity of CVE-2026-8987 is critical, with a CVSS score of 9.4.
How do I fix CVE-2026-8987?
To fix CVE-2026-8987, update the Autel Maxi Charger firmware to the latest version or apply relevant patches provided by the vendor.
What impact does CVE-2026-8987 have?
CVE-2026-8987 can lead to denial of service and potentially allow an authenticated attacker to execute arbitrary code.
Which software is affected by CVE-2026-8987?
CVE-2026-8987 affects the Autel Maxi Charger Single firmware versions through V1.03.51.
What type of vulnerability is CVE-2026-8987?
CVE-2026-8987 is classified as a heap-based buffer overflow vulnerability.