EV
Vendor
EVerest
31
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-33015 | EV everest-core EVerest | 5.2 | Mar 26 | EVerest has RemoteStop Bypass via BCB Toggle Session Restart |
| CVE-2026-33014 | EV everest-core EVerest | 5.2 | Mar 26 | EVerest has Delayed Authorization Response Bypasses Termination After RemoteStop |
| CVE-2026-33009 | EV everest-core EVerest | 6.5 | Mar 26 | EVerest: MQTT Switch-Phases Command Data Race Causing Charger State Corruptio |
| CVE-2026-29044 | EV everest-core EVerest | 6.5 | Mar 26 | EVerest: Charging Continues When WithdrawAuthorization Is Processed Before TransactionStarted |
| CVE-2026-27828 | EV everest-core EVerest | 7.5 | Mar 26 | EVerest: ISO15118 session_setup use-after-free can crash EVSE process |
| CVE-2026-27816 | EV everest-core EVerest | 9.1 | Mar 26 | EVerest's ISO15118 update_energy_transfer_modes overflow can corrupt EVSE state |
| CVE-2026-27815 | EV everest-core EVerest | 9.1 | Mar 26 | EVerest: ISO15118 session_setup payment options overflow can corrupt EVSE state |
| CVE-2026-27814 | EV everest-core EVerest | 4.2 | Mar 26 | EVerest EvseManager phase-switch path has unsynchronized shared-state access race condition |
| CVE-2026-27813 | EV everest-core EVerest | 5.3 | Mar 26 | EVerest has use-after-free in auth timeout timer via race condition |
| CVE-2026-26074 | EV everest-core EVerest | 7.0 | Mar 26 | EVerest: OCPP201 startup event_queue lock mismatch leads to std::map/std::queue data race |
| CVE-2026-26073 | EV everest-core EVerest | 5.9 | Mar 26 | EVerest: OCPP 1.6 heap corruption caused by lock-free insertion in event_queue |
| CVE-2026-26072 | EV everest-core EVerest | 4.2 | Mar 26 | EVerest has race-condition-induced std::map corruption in OCPP 1.6 evse_soc_map |
| CVE-2026-26071 | EV everest-core EVerest | 4.2 | Mar 26 | EVerest: OCPP 2.0.1 EVCCID Data Race Leads to Heap Use‑After‑Free |
| CVE-2026-26070 | EV everest-core EVerest | 4.2 | Mar 26 | EVerest: OCPP 2.0.1 EV SoC Update Race Causes Charge Point Crash |
| CVE-2026-26008 | EV everest-core EVerest | 7.5 | Mar 26 | EVerest has OOB via EVSE ID Indexing Mismatch in OCPP 2.0.1 UpdateAllowedEnergyTransferModes |
| CVE-2026-23995 | EV everest-core EVerest | 7.8 | Mar 26 | EVerest has stack buffer overflow in ifreq.ifr_name when interface name exceeds IFNAMSIZ |
| CVE-2026-22790 | EV everest-core EVerest | 8.8 | Mar 26 | EVerest's unchecked SLAC payload length causes stack overflow in HomeplugMessage::setup_payload |
| CVE-2026-22593 | EV everest-core EVerest | 7.8 | Mar 26 | EVerest has off-by-one stack buffer overflow in IsoMux certificate filename parsing |
| CVE-2026-24003 | EV everest-core EVerest | 5.3 | Jan 26 | EvseV2G has sequence state validation bypass |
| CVE-2025-68141 | EV everest-core EVerest | 7.4 | Jan 21 | EVerest vulnerable to null pointer dereference during DC_ChargeLoopRes document deserialization |
| CVE-2025-68140 | EV everest-core EVerest | 4.3 | Jan 21 | EVerest allows null session ID to bypass session ID verification |
| CVE-2025-68139 | EV everest-core EVerest | 4.3 | Jan 21 | In EVerest, by default, the EV is responsible for closing the connection if the module encounters an error during request processing |
| CVE-2025-68138 | EV everest-core EVerest | 4.7 | Jan 21 | EVerest affected by memory exhaustion in libocpp |
| CVE-2026-23955 | EV everest-core EVerest | 4.2 | Jan 21 | EVerest vulnerable to concatenation of strings literal and integers |
| CVE-2025-68137 | EV everest-core EVerest | 8.3 | Jan 21 | EVerest's Integer Overflow and Signed to Unsigned conversion lead to either stack buffer overflow or infinite loop |
| CVE-2025-68136 | EV everest-core EVerest | 7.4 | Jan 21 | EVerest's inadequate session handling can lead to memory-related errors or exhaustion of the operating system’s file descriptors, resulting in a denial of service |
| CVE-2025-68135 | EV everest-core EVerest | 6.5 | Jan 21 | EVerest's inadequate exception handling leads to denial of service |
| CVE-2025-68134 | EV everest-core EVerest | 7.4 | Jan 21 | EVerest's use of assert functions can potentially lead to denial of service |
| CVE-2025-68132 | EV everest-core EVerest | 4.6 | Jan 21 | EVerest has out-of-bounds read in DZG_GSH01 SLIP CRC parser that can crash powermeter driver |
| CVE-2025-68133 | EV everest-core EVerest | 7.4 | Jan 21 | EVerest's unlimited connections can lead to DoS through operating system resource exhaustion |
| CVE-2015-6454 | PE Peakhmi Everest | – | Sep 26 | Everest PeakHMI before 8.7.0.2, when the video server is used, allows remote attackers to cause a denial of service (incorrect pointer dereference and daemon crash) via a crafted… |