EV
Product
everest-core
30
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 2High 11Medium 17Low 0
Watch
Add everest-core to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-22790 | 8.8 | Mar 26 | EVerest's unchecked SLAC payload length causes stack overflow in HomeplugMessage::setup_payload Affected: < 2026.02.0 |
| CVE-2025-68137 | 8.3 | Jan 21 | EVerest's Integer Overflow and Signed to Unsigned conversion lead to either stack buffer overflow or infinite loop Affected: < 2025.10.0 |
| CVE-2026-23995 | 7.8 | Mar 26 | EVerest has stack buffer overflow in ifreq.ifr_name when interface name exceeds IFNAMSIZ Affected: < 2026.02.0 |
| CVE-2026-22593 | 7.8 | Mar 26 | EVerest has off-by-one stack buffer overflow in IsoMux certificate filename parsing Affected: < 2026.02.0 |
| CVE-2026-27828 | 7.5 | Mar 26 | EVerest: ISO15118 session_setup use-after-free can crash EVSE process Affected: < 2026.02.0 |
| CVE-2026-26008 | 7.5 | Mar 26 | EVerest has OOB via EVSE ID Indexing Mismatch in OCPP 2.0.1 UpdateAllowedEnergyTransferModes Affected: < 2026.02.0 |
| CVE-2025-68141 | 7.4 | Jan 21 | EVerest vulnerable to null pointer dereference during DC_ChargeLoopRes document deserialization Affected: < 2025.10.0 |
| CVE-2025-68136 | 7.4 | Jan 21 | EVerest's inadequate session handling can lead to memory-related errors or exhaustion of the operating system’s file descriptors, resulting in a denial of service Affected: < 2025.10.0 |
| CVE-2025-68134 | 7.4 | Jan 21 | EVerest's use of assert functions can potentially lead to denial of service Affected: < 2025.10.0 |
| CVE-2025-68133 | 7.4 | Jan 21 | EVerest's unlimited connections can lead to DoS through operating system resource exhaustion Affected: < 2025.10.0 |
| CVE-2026-26074 | 7.0 | Mar 26 | EVerest: OCPP201 startup event_queue lock mismatch leads to std::map/std::queue data race Affected: < 2026.02.0 |
Showing 11
