CVE-2026-8987

Name of the Vulnerable Software and Affected Versions Autel Maxi Charger Single versions prior to V1.03.52

Description A heap-based buffer overflow occurs in the set ap param command processed by the '/localcfg' endpoint. An authenticated attacker can provide oversized input to trigger this issue, which may lead to a denial of service or the execution of arbitrary code. A heap-based buffer overflow is a memory corruption error that happens when a program writes more data to a heap-allocated memory block than it can hold.

Recommendations Update Autel Maxi Charger Single to a version newer than V1.03.51. As a temporary mitigation, restrict access to the '/localcfg' endpoint to minimize the risk of exploitation.