CVE-2026-8986

Autel Maxi Charger Single firmware up to V1.03.51 is vulnerable to OS command injection when handling OCPP GetDiagnostics requests. A crafted diagnostics URL from a malicious or compromised OCPP server can trigger arbitrary command execution on the charging station. This CVE has a high-severity, ...

CVE-2024-23967

Autel MaxiCharger AC Elite Business C50 WebSocket Base64 Decoding Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Business C50 chargers. Although...