PT-2026-60342 · Autel · Maxicharger Ac Elite Home

CVE-2026-13306 · Published 2026-07-15 · Updated 2026-07-29

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Autel MaxiCharger AC Elite Home (affected versions not specified)

Description An authentication bypass exists in the exposed USB interface of the device. This flaw allows a physically present attacker to access system functionality without requiring authentication.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2026-13306

ZDI-26-434

Affected Products

Maxicharger Ac Elite Home

References · 2

• https://zerodayinitiative.com/advisories/ZDI-26-434 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-13306 · Security Note