EV
Product
everest-core
18
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 2High 6Medium 10Low 0
Watch
Add everest-core to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-27816 | 9.1 | Mar 26 | EVerest's ISO15118 update_energy_transfer_modes overflow can corrupt EVSE state Affected: < 2026.02.0 |
| CVE-2026-27815 | 9.1 | Mar 26 | EVerest: ISO15118 session_setup payment options overflow can corrupt EVSE state Affected: < 2026.02.0 |
| CVE-2026-22790 | 8.8 | Mar 26 | EVerest's unchecked SLAC payload length causes stack overflow in HomeplugMessage::setup_payload Affected: < 2026.02.0 |
| CVE-2026-23995 | 7.8 | Mar 26 | EVerest has stack buffer overflow in ifreq.ifr_name when interface name exceeds IFNAMSIZ Affected: < 2026.02.0 |
| CVE-2026-22593 | 7.8 | Mar 26 | EVerest has off-by-one stack buffer overflow in IsoMux certificate filename parsing Affected: < 2026.02.0 |
| CVE-2026-27828 | 7.5 | Mar 26 | EVerest: ISO15118 session_setup use-after-free can crash EVSE process Affected: < 2026.02.0 |
| CVE-2026-26008 | 7.5 | Mar 26 | EVerest has OOB via EVSE ID Indexing Mismatch in OCPP 2.0.1 UpdateAllowedEnergyTransferModes Affected: < 2026.02.0 |
| CVE-2026-26074 | 7.0 | Mar 26 | EVerest: OCPP201 startup event_queue lock mismatch leads to std::map/std::queue data race Affected: < 2026.02.0 |
| CVE-2026-33009 | 6.5 | Mar 26 | EVerest: MQTT Switch-Phases Command Data Race Causing Charger State Corruptio Affected: < 2026.02.0 |
| CVE-2026-29044 | 6.5 | Mar 26 | EVerest: Charging Continues When WithdrawAuthorization Is Processed Before TransactionStarted Affected: < 2026.02.0 |
| CVE-2026-26073 | 5.9 | Mar 26 | EVerest: OCPP 1.6 heap corruption caused by lock-free insertion in event_queue Affected: < 2026.02.0 |
| CVE-2026-27813 | 5.3 | Mar 26 | EVerest has use-after-free in auth timeout timer via race condition Affected: < 2026.02.0 |
| CVE-2026-33015 | 5.2 | Mar 26 | EVerest has RemoteStop Bypass via BCB Toggle Session Restart Affected: < 2026.02.0 |
| CVE-2026-33014 | 5.2 | Mar 26 | EVerest has Delayed Authorization Response Bypasses Termination After RemoteStop Affected: < 2026.02.0 |
| CVE-2026-27814 | 4.2 | Mar 26 | EVerest EvseManager phase-switch path has unsynchronized shared-state access race condition Affected: < 2026.02.0 |
| CVE-2026-26072 | 4.2 | Mar 26 | EVerest has race-condition-induced std::map corruption in OCPP 1.6 evse_soc_map Affected: < 2026.02.0 |
| CVE-2026-26071 | 4.2 | Mar 26 | EVerest: OCPP 2.0.1 EVCCID Data Race Leads to Heap Use‑After‑Free Affected: < 2026.02.0 |
| CVE-2026-26070 | 4.2 | Mar 26 | EVerest: OCPP 2.0.1 EV SoC Update Race Causes Charge Point Crash Affected: < 2026.02.0 |
Showing 18
