EUVD-2026-46643

Autel Maxi Charger Single firmware through V1.03.51 contains a heap-based buffer overflow in the setapparam command handled by the /localcfg endpoint. An authenticated attacker can supply oversized input, resulting in denial of service and potentially arbitrary code execution...

CVE-2026-8987

CVE-2026-8987 affects Autel Maxi Charger Single firmware up to V1.03.51. The issue is a heap-based buffer overflow in the set_ap_param command handled by the /localcfg endpoint. An authenticated attacker can supply oversized input, leading to denial of service and potentially arbitrary code execu...