What is GHSA-g3wx-h3f8-c23p?

GHSA-g3wx-h3f8-c23p is a security advisory published by GitHub Security Advisories with Critical severity. Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection in the ...

Which CVE IDs does GHSA-g3wx-h3f8-c23p cover?

GHSA-g3wx-h3f8-c23p covers the following CVE IDs: CVE-2026-8985. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-g3wx-h3f8-c23pCritical

Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection in the ...

Vendor

GitHub Security Advisories

Published

July 22, 2026

Last Modified

July 22, 2026

🔗 CVE IDs covered (1)

CVE-2026-8985 →

📋 Description

Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection in the /test endpoint exposed on TCP port 9002. An unauthenticated attacker can supply crafted input in the url parameter to execute arbitrary operating system commands.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-8985
https://cyberdanube.com/security-research/multiple-vulnerabilities-in-autel-maxi-charger
https://github.com/advisories/GHSA-g3wx-h3f8-c23p