autel maxicharger single charger firmware

Name: autel maxicharger single charger firmware
Brand: autel

productUS

cpe:2.3:o:autel:maxicharger_single_charger_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

4critical4high3medium0low

updated 2026-10-28

vulnerabilities (18)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-8985US	critical9.8	7.09% (94th)	—	no fix	2026-07-21	≤ 1.03.51
CVE-2026-8986US	critical9.8	3.28% (88th)	—	no fix	2026-07-21	≤ 1.03.51
CVE-2026-8984US	critical9.8	0.91% (60th)	—	no fix	2026-07-21	≤ 1.03.51
CVE-2026-8983US	critical9.8OT elevated	0.69% (53rd)	—	no fix	2026-07-21	≤ 1.03.51
CVE-2026-8987US	high8.8	0.64% (50th)	—	no fix	2026-07-21	≤ 1.03.51
CVE-2025-5823US	medium6.5	0.55% (46th)	—	1.56.51	2025-06-25	2 versions
CVE-2026-8982US	high8.1OT elevated	0.48% (41st)	—	no fix	2026-07-21	≤ 1.03.51
CVE-2025-6678US	—OT elevated	0.48% (41st)	—	1.39.51	2025-06-25	2 versions
CVE-2025-5822US	high8.8OT elevated	0.41% (35th)	—	1.39.51	2025-06-25	2 versions
CVE-2025-5830US	—	0.39% (33rd)	—	1.39.51	2025-06-25	2 versions
CVE-2025-5827US	—	0.39% (33rd)	—	1.56.51	2025-06-25	2 versions
CVE-2025-5829US	—	0.34% (27th)	—	1.56.51	2025-06-25	2 versions
CVE-2025-5828US	—	0.34% (27th)	—	1.39.51	2025-06-25	2 versions
CVE-2025-5825US	—	0.28% (20th)	—	1.56.51	2025-06-25	2 versions
CVE-2025-5826US	—	0.27% (20th)	—	1.56.51	2025-06-25	2 versions
CVE-2026-8989US	medium6.8	0.24% (15th)	—	no fix	2026-07-21	≤ 1.03.51
CVE-2026-8988US	medium6.8	0.24% (15th)	—	no fix	2026-07-21	≤ 1.03.51
CVE-2025-5824US	high7.5	0.17% (7th)	—	1.39.51	2025-06-25	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-1191On-Chip Debug and Test Interface With Improper Access Control2 CVEs
CWE-121Stack-based Buffer Overflow2 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs
CWE-798Use of Hard-coded Credentials2 CVEs
CWE-115Misinterpretation of Input1 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-1244Internal Asset Exposed to Unsafe Debug Access Level or State1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.