EVerest

Records34All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high11CVSS 7.0–8.9

Exploited now

EVerest records in CISA KEV

No EVerest vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Peakhmi 1 record LOW

Records

34 records

TI-2026-25456 CVE-2026-33009

EVerest: MQTT Switch-Phases Command Data Race Causing Charger State Corruptio

HIGH 75

EVerest is an EV charging software stack.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00253 Published 2026-03-26 Fixed in 2026.02.0 CWE-362

TI-2024-24822 CVE-2024-37310

EVerest has an integer overflow in the "v2g_incoming_v2gtp" function

HIGH 74

EVerest is an EV charging software stack.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00671 Published 2024-07-10 Fixed in 2024.3.1, 2024.6.0 CWE-122

TI-2026-18308 CVE-2026-22790

EVerest's unchecked SLAC payload length causes stack overflow in HomeplugMessage::setup_payload

HIGH 73

EVerest is an EV charging software stack.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00551 Published 2026-03-26 Fixed in 2026.02.0 CWE-121

TI-2026-19334 CVE-2026-23995

EVerest has stack buffer overflow in ifreq.ifr_name when interface name exceeds IFNAMSIZ

HIGH 72

EVerest is an EV charging software stack.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00215 Published 2026-03-26 Fixed in 2026.02.0 CWE-121

TI-2026-18154 CVE-2026-22593

EVerest has off-by-one stack buffer overflow in IsoMux certificate filename parsing

HIGH 72

EVerest is an EV charging software stack.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.0014 Published 2026-03-26 Fixed in 2026.02.0 CWE-193

TI-2025-41718 CVE-2025-68137

EVerest's Integer Overflow and Signed to Unsigned conversion lead to either stack buffer overflow or infinite loop

HIGH 72

EVerest is an EV charging software stack.

CVSS 3.1HIGH 8.4 Adjacent network No auth No interaction EPSS 0.01308 Published 2026-01-21 Fixed in 2025.10.0 CWE-120

TI-2025-41717 CVE-2025-68136

Resource allocation without limits in everest-core

HIGH 66

EVerest is an EV charging software stack.

CVSS 3.1HIGH 7.4 Adjacent network No auth No interaction EPSS 0.00302 Published 2026-01-21 Fixed in 2025.10.0 CWE-770

TI-2025-41715 CVE-2025-68134

EVerest's use of assert functions can potentially lead to denial of service

HIGH 66

EVerest is an EV charging software stack.

CVSS 3.1HIGH 7.4 Adjacent network No auth No interaction EPSS 0.00177 Published 2026-01-21 Fixed in 2025.10.0 CWE-20

TI-2025-41714 CVE-2025-68133

EVerest's unlimited connections can lead to DoS through operating system resource exhaustion

HIGH 66

EVerest is an EV charging software stack.

CVSS 3.1HIGH 7.4 Adjacent network No auth No interaction EPSS 0.00398 Published 2026-01-21 Fixed in 2025.10.0 CWE-770

TI-2026-23189 CVE-2026-29044

EVerest: Charging Continues When WithdrawAuthorization Is Processed Before TransactionStarted

MEDIUM 62

EVerest is an EV charging software stack.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00299 Published 2026-03-26 Fixed in 2026.02.0 CWE-863

TI-2025-41716 CVE-2025-68135

EVerest's inadequate exception handling leads to denial of service

MEDIUM 62

EVerest is an EV charging software stack.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00329 Published 2026-01-21 Fixed in 2025.10.0 CWE-703

TI-2026-25462 CVE-2026-33015

EVerest has RemoteStop Bypass via BCB Toggle Session Restart

MEDIUM 57

EVerest is an EV charging software stack.

CVSS 3.1MEDIUM 5.2 Physical No auth No interaction EPSS 0.00222 Published 2026-03-26 Fixed in 2026.02.0 CWE-863

TI-2026-25461 CVE-2026-33014

EVerest has Delayed Authorization Response Bypasses Termination After RemoteStop

MEDIUM 57

EVerest is an EV charging software stack.

CVSS 3.1MEDIUM 5.2 Physical No auth No interaction EPSS 0.00217 Published 2026-03-26 Fixed in 2026.02.0 CWE-863

TI-2026-19297 CVE-2026-23955

EVerest vulnerable to concatenation of strings literal and integers

MEDIUM 53

EVerest is an EV charging software stack.

CVSS 3.1MEDIUM 4.2 Local High privileges User interaction EPSS 0.00196 Published 2026-01-21 Fixed in 2025.9.0 CWE-1046

TI-2025-36953 CVE-2025-59398 · GHSA-9j3x-w929-5ch3

The OCPP implementation in libocpp before 0.26.2 allows a denial of service (EVerest…

MEDIUM 48

The OCPP implementation in libocpp before 0.26.2 allows a denial of service (EVerest crash) via JSON input larger than 255 characters, because a CiString<255> object is created with StringTooLarge set to Throw.

CVSS 3.1LOW 3.1 Adjacent network No auth No interaction EPSS 0.0024 Published 2025-09-15 Fixed in 0.26.2 CWE-392

TI-2025-41713 CVE-2025-68132

EVerest has out-of-bounds read in DZG_GSH01 SLIP CRC parser that can crash powermeter driver

MEDIUM 46

EVerest is an EV charging software stack.

CVSS 4.0LOW 2.4 Physical No auth No interaction EPSS 0.00289 Published 2026-01-21 Fixed in 2025.12.0 CWE-125

TI-2026-21022 CVE-2026-26008

EVerest has OOB via EVSE ID Indexing Mismatch in OCPP 2.0.1 UpdateAllowedEnergyTransferModes

LOW 33

EVerest is an EV charging software stack.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00373 Published 2026-03-26 Fixed in 2026.02.0 CWE-125

TI-2025-41722 CVE-2025-68141

EVerest vulnerable to null pointer dereference during DC_ChargeLoopRes document deserialization

LOW 32

EVerest is an EV charging software stack.

CVSS 3.1HIGH 7.4 Adjacent network No auth No interaction EPSS 0.00281 Published 2026-01-21 Fixed in 2025.10.0 CWE-476

TI-2026-21078 CVE-2026-26074

EVerest: OCPP201 startup event_queue lock mismatch leads to std::map/std::queue data race

LOW 30

EVerest is an EV charging software stack.

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.00146 Published 2026-03-26 Fixed in 2026.02.0 CWE-362

TI-2015-05418 CVE-2015-6454 · GHSA-q735-69hc-jw9q

Everest PeakHMI before 8.7.0.2, when the video server is used, allows remote attackers to…

LOW 28

Everest PeakHMI before 8.7.0.2, when the video server is used, allows remote attackers to cause a denial of service (incorrect pointer dereference and daemon crash) via a crafted packet.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02509 Published 2015-09-25 No fix listed

TI-2026-21077 CVE-2026-26073

EVerest: OCPP 1.6 heap corruption caused by lock-free insertion in event_queue

LOW 26

EVerest is an EV charging software stack.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00316 Published 2026-03-26 Fixed in 2026.02.0 CWE-122

TI-2026-22179 CVE-2026-27828

EVerest: ISO15118 session_setup use-after-free can crash EVSE process

LOW 25

EVerest is an EV charging software stack.

CVSS 4.0MEDIUM 5.5 Local No auth No interaction EPSS 0.00297 Published 2026-03-26 Fixed in 2026.02.0 CWE-416

TI-2026-22168 CVE-2026-27815

EVerest: ISO15118 session_setup payment options overflow can corrupt EVSE state

LOW 25

EVerest is an EV charging software stack.

CVSS 4.0MEDIUM 5.5 Local No auth No interaction EPSS 0.00283 Published 2026-03-26 Fixed in 2026.02.0 CWE-787

TI-2026-22169 CVE-2026-27816

EVerest's ISO15118 update_energy_transfer_modes overflow can corrupt EVSE state

LOW 24

EVerest is an EV charging software stack.

CVSS 4.0MEDIUM 5.5 Local No auth No interaction EPSS 0.00204 Published 2026-03-26 Fixed in 2026.02.0 CWE-787

TI-2026-19342 CVE-2026-24003

EvseV2G has sequence state validation bypass

LOW 24

EVerest is an EV charging software stack.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00279 Published 2026-01-26 No fix listed CWE-287

Open these records in search →

Critical	1
High	11
Medium	19
Low	3
No CVSS	0