PatchTheCVEautel vulnerabilities
Recent CVEs affecting autel products. 8 tracked.
autel has 8 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 8. Most recent: 2026-07-21. Highest priority: CVE-2026-8985 (score 71/100).
- CVE-2026-8983 CRITICAL 9.8 UPGRADE Autel Maxi Charger Single firmware through V1.03.51 contains a hard-coded authentication token that bypasses a
- CVE-2026-8982 HIGH 8.1 UPGRADE Two undocumented privileged accounts exist in Autel Maxi Charger Single firmware through V1.03.51
- CVE-2026-8985 CRITICAL 9.8 UPGRADE Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection in the /test endpoin
- CVE-2026-8986 CRITICAL 9.8 UPGRADE Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection when processing OCPP
- CVE-2026-8984 CRITICAL 9.8 UPGRADE Autel Maxi Charger Single firmware through V1.03.51 allows unauthenticated remote code execution via the servi
- CVE-2026-8987 HIGH 8.8 UPGRADE Autel Maxi Charger Single firmware through V1.03.51 contains a heap-based buffer overflow in the set_ap_param
- CVE-2026-8988 MEDIUM 6.8 UPGRADE Autel Maxi Charger Single firmware through V1.03.51 exposes an accessible UART interface that permits interrup
- CVE-2026-8989 MEDIUM 6.8 UPGRADE Autel Maxi Charger Single firmware through V1.03.51 permits unrestricted access to the NXP i.MX6 recovery mode
FAQ
How do I fix autel vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is autel being exploited right now?
None of the tracked autel CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which autel CVE should I patch first?
CVE-2026-8985 currently ranks highest (71/100): Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection in the /test endpoin.