CVE-2026-8985info

Summary

by MITRE • 07/21/2026

Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection in the /test endpoint exposed on TCP port 9002. An unauthenticated attacker can supply crafted input in the url parameter to execute arbitrary operating system commands.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Disclosure

07/21/2026

Moderation

in review

EPSS

0.00000

KEV

no

Activities

very low

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-8985
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-8985
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-8985/

◂ PreviousOverviewNext ▸

Interested in the pricing of exploits?

See the underground prices here!