WHILL Model C2 Electric Wheelchairs and Model F Power Chairs

Critical vulnerability in WHILL Model C2 Electric Wheelchairs and Model F Power Chairs allows attackers within Bluetooth range to take complete control without authentication. The vulnerability (CVE-2025-14346) enables unauthorized pairing, movement commands, speed restriction overrides, and configuration manipulation. CVSS score of 9.8 indicates critical severity. WHILL deployed fixes on December 29th, 2025 including device-side speed profile protection and unlock command restrictions. No known public exploitation reported to CISA at time of advisory.