PT-2026-60341 · Autel · Maxicharger Ac Elite Home

CVE-2026-13305 · Published 2026-07-15 · Updated 2026-07-29

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Autel MaxiCharger AC Elite Home (affected versions not specified)

Description An issue exists in the handling of software updates due to the improper verification of cryptographic signatures. This allows a physically present attacker to execute arbitrary code in the context of the device by providing a malicious software update image. No authentication is required to exploit this flaw.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-347

Related Identifiers

CVE-2026-13305

ZDI-26-433

Affected Products

Maxicharger Ac Elite Home

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-13305 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-26-433 · Security Note