EV
Product
Everest
29
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 2High 11Medium 16Low 0
Watch
Add Everest to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-33009 | 6.5 | Mar 26 | EVerest: MQTT Switch-Phases Command Data Race Causing Charger State Corruptio Affected: before 2026.02.0 |
| CVE-2026-29044 | 6.5 | Mar 26 | EVerest: Charging Continues When WithdrawAuthorization Is Processed Before TransactionStarted Affected: before 2026.02.0 |
| CVE-2025-68135 | 6.5 | Jan 21 | EVerest's inadequate exception handling leads to denial of service Affected: before 2025.10.0 |
| CVE-2026-26073 | 5.9 | Mar 26 | EVerest: OCPP 1.6 heap corruption caused by lock-free insertion in event_queue Affected: before 2026.02.0 |
| CVE-2026-27813 | 5.3 | Mar 26 | EVerest has use-after-free in auth timeout timer via race condition Affected: before 2026.02.0 |
| CVE-2026-24003 | 5.3 | Jan 26 | EvseV2G has sequence state validation bypass Affected: through 2025.12.1 |
| CVE-2026-33015 | 5.2 | Mar 26 | EVerest has RemoteStop Bypass via BCB Toggle Session Restart Affected: before 2026.02.0 |
| CVE-2026-33014 | 5.2 | Mar 26 | EVerest has Delayed Authorization Response Bypasses Termination After RemoteStop Affected: before 2026.02.0 |
| CVE-2025-68132 | 4.6 | Jan 21 | EVerest has out-of-bounds read in DZG_GSH01 SLIP CRC parser that can crash powermeter driver Affected: before 2025.12.0 |
| CVE-2025-68140 | 4.3 | Jan 21 | EVerest allows null session ID to bypass session ID verification Affected: before 2025.9.0 |
| CVE-2025-68139 | 4.3 | Jan 21 | In EVerest, by default, the EV is responsible for closing the connection if the module encounters an error during request processing Affected: through 2025.12.1 |
| CVE-2026-27814 | 4.2 | Mar 26 | EVerest EvseManager phase-switch path has unsynchronized shared-state access race condition Affected: before 2026.02.0 |
| CVE-2026-26072 | 4.2 | Mar 26 | EVerest has race-condition-induced std::map corruption in OCPP 1.6 evse_soc_map Affected: before 2026.02.0 |
| CVE-2026-26071 | 4.2 | Mar 26 | EVerest: OCPP 2.0.1 EVCCID Data Race Leads to Heap Use‑After‑Free Affected: before 2026.02.0 |
| CVE-2026-26070 | 4.2 | Mar 26 | EVerest: OCPP 2.0.1 EV SoC Update Race Causes Charge Point Crash Affected: before 2026.02.0 |
| CVE-2026-23955 | 4.2 | Jan 21 | EVerest vulnerable to concatenation of strings literal and integers Affected: before 2025.9.0 |
Showing 16
