Question 1

What is CVE-2026-8985 — CVE-2026-8985?

Accepted Answer

Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection in the /test endpoint exposed on TCP port 9002. An unauthenticated attacker can supply crafted input in the url parameter to execute arbitrary operating system commands.

Question 2

What is the authoritative source for CVE-2026-8985?

Accepted Answer

CVE-2026-8985 (CVE-2026-8985) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-8985CVE-2026-8985

Description

Scoring