EV
Product
everest-core
by EVerest · last CVE Mar 26, 2026
31
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 3High 11Medium 17Low 0
Watch

Add everest-core to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-27816
9.1
0%
Mar 26
EVerest's ISO15118 update_energy_transfer_modes overflow can corrupt EVSE state
Affected: < 2026.02.0
CVE-2026-27815
9.1
0%
Mar 26
EVerest: ISO15118 session_setup payment options overflow can corrupt EVSE state
Affected: < 2026.02.0
CVE-2024-37310
9.0
1%
Jul 10
EVerest has an integer overflow in the "v2g_incoming_v2gtp" function
Affected: < 2024.3.1; >= 2024.4.0, < 2024.6.0
CVE-2026-22790
8.8
1%
Mar 26
EVerest's unchecked SLAC payload length causes stack overflow in HomeplugMessage::setup_payload
Affected: < 2026.02.0
CVE-2025-68137
8.3
1%
Jan 21
EVerest's Integer Overflow and Signed to Unsigned conversion lead to either stack buffer overflow or infinite loop
Affected: < 2025.10.0
CVE-2026-23995
7.8
0%
Mar 26
EVerest has stack buffer overflow in ifreq.ifr_name when interface name exceeds IFNAMSIZ
Affected: < 2026.02.0
CVE-2026-22593
7.8
0%
Mar 26
EVerest has off-by-one stack buffer overflow in IsoMux certificate filename parsing
Affected: < 2026.02.0
CVE-2026-27828
7.5
0%
Mar 26
EVerest: ISO15118 session_setup use-after-free can crash EVSE process
Affected: < 2026.02.0
CVE-2026-26008
7.5
0%
Mar 26
EVerest has OOB via EVSE ID Indexing Mismatch in OCPP 2.0.1 UpdateAllowedEnergyTransferModes
Affected: < 2026.02.0
CVE-2025-68141
7.4
0%
Jan 21
EVerest vulnerable to null pointer dereference during DC_ChargeLoopRes document deserialization
Affected: < 2025.10.0
CVE-2025-68136
7.4
0%
Jan 21
EVerest's inadequate session handling can lead to memory-related errors or exhaustion of the operating system’s file descriptors, resulting in a denial of service
Affected: < 2025.10.0
CVE-2025-68134
7.4
0%
Jan 21
EVerest's use of assert functions can potentially lead to denial of service
Affected: < 2025.10.0
CVE-2025-68133
7.4
0%
Jan 21
EVerest's unlimited connections can lead to DoS through operating system resource exhaustion
Affected: < 2025.10.0
CVE-2026-26074
7.0
0%
Mar 26
EVerest: OCPP201 startup event_queue lock mismatch leads to std::map/std::queue data race
Affected: < 2026.02.0
CVE-2026-33009
6.5
0%
Mar 26
EVerest: MQTT Switch-Phases Command Data Race Causing Charger State Corruptio
Affected: < 2026.02.0
CVE-2026-29044
6.5
0%
Mar 26
EVerest: Charging Continues When WithdrawAuthorization Is Processed Before TransactionStarted
Affected: < 2026.02.0
CVE-2025-68135
6.5
0%
Jan 21
EVerest's inadequate exception handling leads to denial of service
Affected: < 2025.10.0
CVE-2026-26073
5.9
0%
Mar 26
EVerest: OCPP 1.6 heap corruption caused by lock-free insertion in event_queue
Affected: < 2026.02.0
CVE-2026-27813
5.3
0%
Mar 26
EVerest has use-after-free in auth timeout timer via race condition
Affected: < 2026.02.0
CVE-2026-24003
5.3
0%
Jan 26
EvseV2G has sequence state validation bypass
Affected: <= 2025.12.1
CVE-2026-33015
5.2
0%
Mar 26
EVerest has RemoteStop Bypass via BCB Toggle Session Restart
Affected: < 2026.02.0
CVE-2026-33014
5.2
0%
Mar 26
EVerest has Delayed Authorization Response Bypasses Termination After RemoteStop
Affected: < 2026.02.0
CVE-2025-68138
4.7
0%
Jan 21
EVerest affected by memory exhaustion in libocpp
Affected: libocpp < 0.30.1
CVE-2025-68132
4.6
0%
Jan 21
EVerest has out-of-bounds read in DZG_GSH01 SLIP CRC parser that can crash powermeter driver
Affected: < 2025.12.0
CVE-2025-68140
4.3
0%
Jan 21
EVerest allows null session ID to bypass session ID verification
Affected: < 2025.9.0
CVE-2025-68139
4.3
0%
Jan 21
In EVerest, by default, the EV is responsible for closing the connection if the module encounters an error during request processing
Affected: <= 2025.12.1
CVE-2026-27814
4.2
0%
Mar 26
EVerest EvseManager phase-switch path has unsynchronized shared-state access race condition
Affected: < 2026.02.0
CVE-2026-26072
4.2
0%
Mar 26
EVerest has race-condition-induced std::map corruption in OCPP 1.6 evse_soc_map
Affected: < 2026.02.0
CVE-2026-26071
4.2
0%
Mar 26
EVerest: OCPP 2.0.1 EVCCID Data Race Leads to Heap Use‑After‑Free
Affected: < 2026.02.0
CVE-2026-26070
4.2
0%
Mar 26
EVerest: OCPP 2.0.1 EV SoC Update Race Causes Charge Point Crash
Affected: < 2026.02.0
CVE-2026-23955
4.2
0%
Jan 21
EVerest vulnerable to concatenation of strings literal and integers
Affected: < 2025.9.0
Showing 31