Maxicharger Single CVE-2026-8987

Autel MaxiCharger Single EV charging stations running firmware through V1.03.51 contain a critical remote code execution vulnerability accessible to authenticated users on the local configuration interface. Publicly available exploit code creates immediate operational risk; without vendor patches, affected charging infrastructure faces potential service disruption or unauthorized system compromise. Organizations operating these devices must immediately implement network isolation and restrict configuration access.

Within 24 hours: Identify all Autel MaxiCharger Single units in operation and verify current firmware versions; restrict network access to the /localcfg endpoint to authorized personnel only using firewall rules or network segmentation. Within 7 days: Complete inventory assessment, implement multi-factor authentication for configuration access, and deploy monitoring to detect exploitation attempts against the /localcfg endpoint. Within 30 days: Establish continuous monitoring for Autel security advisories and firmware patches; develop and test an update deployment plan to apply patches immediately upon release; evaluate network architecture changes to isolate charger management from general corporate networks.

No vendor-released patch identified at time of analysis. Interim mitigations include: (1) network segmentation restricting access to /localcfg endpoint to authorized administrators only; (2) network-based intrusion detection tuned for exploitation attempts; (3) comprehensive access logging and monitoring of configuration interface activity; (4) isolation of affected chargers to dedicated management subnets; (5) out-of-band firmware integrity verification.