CVE-2026-8987: Authenticated Heap Overflow
Published Jul 21, 2026
·Updated
Autel Maxi Charger Single firmware through V1.03.51 contains a heap-based buffer overflow in the setapparam command handled by the /localcfg endpoint. An authenticated attacker can supply oversized input, resulting in denial of service and potentially arbitrary code execution.
Affected Software
4 affected components
Autel Maxi Charger<=V1.03.51
All of the following
Any of the following
Autel Maxicharger Single Charger Firmware<=1.03.51
Autel Maxicharger Single Charger Firmware<=1.03.51
Autel Maxicharger Single Charger
Event History
Jul 21, 2026
CVE Published
via MITRE·09:18 PM
Data Sourced
via MITRE·09:18 PM
DescriptionWeakness
Data Sourced
via NVD·10:19 PM
DescriptionSeverityWeaknessAffected Software
Oct 29, 58588
Event
via FIRST·06:55 AM