CVE-2026-13306

mediumCVSS 4.3covered by 1 sourcefirst seen 2026-07-29

Autel MaxiCharger AC Elite Home USB Authentication Bypass Vulnerability. This vulnerability allows physically present attackers to bypass authentication on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the exposed USB interface. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-29046.

⚡ Watch CVE-2026-13306

Get an email if CVE-2026-13306 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Low exploitation risk0.18% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 8% of all EPSS-scored CVEs.

Advisory coverage (1)

mediumCVE-2026-13306: Autel MaxiCharger AC Elite Home USB Authentication Bypass Vulnerability. This vulnerability al…nvd · 2026-07-29

External references

NVD record for CVE-2026-13306

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-13306 status](https://www.csirts.com/badge/CVE-2026-13306)](https://www.csirts.com/cve/CVE-2026-13306)