https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T23:01:56.775141+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2025-14946 cnvd-2025-14946 2026-10-19T23:01:56.777840+00:00 cnvd-2025-14946 https://cve.radiocsirt.org/vuln/euvd-2026-245888 EUVD-2026-245888 2026-10-19T23:01:56.777871+00:00 EUVD-2026-245888 https://cve.radiocsirt.org/vuln/fkie_cve-2025-5830 fkie_cve-2025-5830 2026-10-19T23:01:56.777885+00:00

Autel MaxiCharger AC Wallbox Commercial DLB_SlaveRegister Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Wallbox Commercial EV chargers. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the handling of DLB_SlaveRegister messages. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-26327.

 https://cve.radiocsirt.org/vuln/ghsa-vx6x-gx62-4xg7 GHSA-vx6x-gx62-4xg7 2026-10-19T23:01:56.777916+00:00

Autel MaxiCharger AC Wallbox Commercial DLB_SlaveRegister Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Wallbox Commercial EV chargers. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the handling of DLB_SlaveRegister messages. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-26327.