# cve.now: Autel

The newest entries naming Autel as an affected vendor (up to 200), of 28 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-13308](https://cve.now/CVE-2026-13308.md): Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability (CVSS 8.1)
- [CVE-2026-13307](https://cve.now/CVE-2026-13307.md): Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability (CVSS 6.8)
- [CVE-2026-13309](https://cve.now/CVE-2026-13309.md): Autel MaxiCharger AC Elite Home NFC Stack-based Buffer Overflow Arbitrary Code Execution Vulnerability (CVSS 6.8)
- [CVE-2026-13306](https://cve.now/CVE-2026-13306.md): Autel MaxiCharger AC Elite Home USB Authentication Bypass Vulnerability (CVSS 4.3)
- [CVE-2026-13305](https://cve.now/CVE-2026-13305.md): Autel MaxiCharger AC Elite Home Software Update Improper Verification of Cryptographic Signature Arbitrary Code Execution Vulnerability (CVSS 6.4)
- [CVE-2026-8989](https://cve.now/CVE-2026-8989.md): Open Recovery Mode (CVSS 8.6)
- [CVE-2026-8988](https://cve.now/CVE-2026-8988.md): Access to Bootloader (CVSS 8.6)
- [CVE-2026-8987](https://cve.now/CVE-2026-8987.md): Authenticated Heap Overflow (CVSS 9.4)
- [CVE-2026-8986](https://cve.now/CVE-2026-8986.md): Command Injection via Malicious OCPP Server (CVSS 9.5)
- [CVE-2026-8985](https://cve.now/CVE-2026-8985.md): Unauthenticated Command Injection (CVSS 10.0)
- [CVE-2026-8984](https://cve.now/CVE-2026-8984.md): Unauthenticated RCE (CVSS 10.0)
- [CVE-2026-8983](https://cve.now/CVE-2026-8983.md): Backdoor Authentication Token (CVSS 10.0)
- [CVE-2026-8982](https://cve.now/CVE-2026-8982.md): Hard-coded / Backdoor Accounts (CVSS 10.0)
- [CVE-2025-5825](https://cve.now/CVE-2025-5825.md): Autel MaxiCharger AC Wallbox Commercial Firmware Downgrade Remote Code Execution Vulnerability (CVSS 7.5)
- [CVE-2025-6678](https://cve.now/CVE-2025-6678.md): Autel MaxiCharger AC Wallbox Commercial PIN Missing Authentication Information Disclosure Vulnerability (CVSS 7.5)
- [CVE-2025-5830](https://cve.now/CVE-2025-5830.md): Autel MaxiCharger AC Wallbox Commercial DLB\_SlaveRegister Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2025-5829](https://cve.now/CVE-2025-5829.md): Autel MaxiCharger AC Wallbox Commercial autocharge Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 6.8)
- [CVE-2025-5823](https://cve.now/CVE-2025-5823.md): Autel MaxiCharger AC Wallbox Commercial Serial Number Exposed Dangerous Method Information Disclosure Vulnerability (CVSS 4.9)
- [CVE-2025-5827](https://cve.now/CVE-2025-5827.md): Autel MaxiCharger AC Wallbox Commercial ble\_process\_esp32\_msg Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2025-5822](https://cve.now/CVE-2025-5822.md): Autel MaxiCharger AC Wallbox Commercial Technician API Incorrect Authorization Privilege Escalation Vulnerability (CVSS 7.1)
- [CVE-2025-5828](https://cve.now/CVE-2025-5828.md): Autel MaxiCharger AC Wallbox Commercial wLength Buffer Overflow Remote Code Execution Vulnerability (CVSS 6.8)
- [CVE-2025-5826](https://cve.now/CVE-2025-5826.md): Autel MaxiCharger AC Wallbox Commercial ble\_process\_esp32\_msg Misinterpretation of Input Vulnerability (CVSS 6.3)
- [CVE-2025-5824](https://cve.now/CVE-2025-5824.md): Autel MaxiCharger AC Wallbox Commercial Origin Validation Error Authentication Bypass Vulnerability (CVSS 5.0)
- [CVE-2024-23959](https://cve.now/CVE-2024-23959.md): Autel MaxiCharger AC Elite Business C50 BLE AppChargingControl Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.0)
- [CVE-2024-23967](https://cve.now/CVE-2024-23967.md): Autel MaxiCharger AC Elite Business C50 WebSocket Base64 Decoding Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.0)
- [CVE-2024-23958](https://cve.now/CVE-2024-23958.md): Autel MaxiCharger AC Elite Business C50 BLE Hardcoded Credentials Authentication Bypass Vulnerability (CVSS 6.5)
- [CVE-2024-23957](https://cve.now/CVE-2024-23957.md): Autel MaxiCharger AC Elite Business C50 DLB\_HostHeartBeat Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2024-7795](https://cve.now/CVE-2024-7795.md): Autel MaxiCharger AC Elite Business C50 AppAuthenExchangeRandomNum Stack-Based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/autel
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.