CVE-2026-8986

Autel Maxi Charger Single firmware up to V1.03.51 is vulnerable to OS command injection when handling OCPP GetDiagnostics requests. A crafted diagnostics URL from a malicious or compromised OCPP server can trigger arbitrary command execution on the charging station. This CVE has a high-severity, ...