Is CVE-2026-8985 being exploited?

No public exploit is currently tracked.

Back

CVE-2026-8985

Description

Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection in the /test endpoint exposed on TCP port 9002. An unauthenticated attacker can supply crafted input in the url parameter to execute arbitrary operating system commands.