backstage

Records663All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical58CVSS 9.0–10.0

CVSS high242CVSS 7.0–8.9

Exploited now

backstage records in CISA KEV

TI-2026-33119 TanStack Unspecified Vulnerability CRITICAL 100KEV 2026-05-27 TI-2018-10499 Linux Kernel Integer Overflow Vulnerability CRITICAL 93KEV 2026-01-26

Components

Products in the NVD configurations · select one to filter the records

Yocto 114 records MEDIUM Backstage 53 records MEDIUM Nats-server 36 records HIGH Pytorch 31 records HIGH Everest 29 records HIGH Harbor 24 records MEDIUM Containerd 22 records HIGH Magma 22 records MEDIUM

Records

29 records in Everest · all components

TI-2026-25456 CVE-2026-33009

EVerest: MQTT Switch-Phases Command Data Race Causing Charger State Corruptio

HIGH 75

EVerest is an EV charging software stack.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00253 Published 2026-03-26 Fixed in 2026.02.0 CWE-362

TI-2026-18308 CVE-2026-22790

EVerest's unchecked SLAC payload length causes stack overflow in HomeplugMessage::setup_payload

HIGH 73

EVerest is an EV charging software stack.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00551 Published 2026-03-26 Fixed in 2026.02.0 CWE-121

TI-2026-19334 CVE-2026-23995

EVerest has stack buffer overflow in ifreq.ifr_name when interface name exceeds IFNAMSIZ

HIGH 72

EVerest is an EV charging software stack.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00215 Published 2026-03-26 Fixed in 2026.02.0 CWE-121

TI-2026-18154 CVE-2026-22593

EVerest has off-by-one stack buffer overflow in IsoMux certificate filename parsing

HIGH 72

EVerest is an EV charging software stack.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.0014 Published 2026-03-26 Fixed in 2026.02.0 CWE-193

TI-2025-41718 CVE-2025-68137

EVerest's Integer Overflow and Signed to Unsigned conversion lead to either stack buffer overflow or infinite loop

HIGH 72

EVerest is an EV charging software stack.

CVSS 3.1HIGH 8.4 Adjacent network No auth No interaction EPSS 0.01308 Published 2026-01-21 Fixed in 2025.10.0 CWE-120

TI-2025-41717 CVE-2025-68136

Resource allocation without limits in everest-core

HIGH 66

EVerest is an EV charging software stack.

CVSS 3.1HIGH 7.4 Adjacent network No auth No interaction EPSS 0.00302 Published 2026-01-21 Fixed in 2025.10.0 CWE-770

TI-2025-41715 CVE-2025-68134

EVerest's use of assert functions can potentially lead to denial of service

HIGH 66

EVerest is an EV charging software stack.

CVSS 3.1HIGH 7.4 Adjacent network No auth No interaction EPSS 0.00177 Published 2026-01-21 Fixed in 2025.10.0 CWE-20

TI-2025-41714 CVE-2025-68133

EVerest's unlimited connections can lead to DoS through operating system resource exhaustion

HIGH 66

EVerest is an EV charging software stack.

CVSS 3.1HIGH 7.4 Adjacent network No auth No interaction EPSS 0.00398 Published 2026-01-21 Fixed in 2025.10.0 CWE-770

TI-2026-23189 CVE-2026-29044

EVerest: Charging Continues When WithdrawAuthorization Is Processed Before TransactionStarted

MEDIUM 62

EVerest is an EV charging software stack.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00299 Published 2026-03-26 Fixed in 2026.02.0 CWE-863

TI-2025-41716 CVE-2025-68135

EVerest's inadequate exception handling leads to denial of service

MEDIUM 62

EVerest is an EV charging software stack.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00329 Published 2026-01-21 Fixed in 2025.10.0 CWE-703

TI-2026-25462 CVE-2026-33015

EVerest has RemoteStop Bypass via BCB Toggle Session Restart

MEDIUM 57

EVerest is an EV charging software stack.

CVSS 3.1MEDIUM 5.2 Physical No auth No interaction EPSS 0.00222 Published 2026-03-26 Fixed in 2026.02.0 CWE-863

TI-2026-25461 CVE-2026-33014

EVerest has Delayed Authorization Response Bypasses Termination After RemoteStop

MEDIUM 57

EVerest is an EV charging software stack.

CVSS 3.1MEDIUM 5.2 Physical No auth No interaction EPSS 0.00217 Published 2026-03-26 Fixed in 2026.02.0 CWE-863

TI-2026-19297 CVE-2026-23955

EVerest vulnerable to concatenation of strings literal and integers

MEDIUM 53

EVerest is an EV charging software stack.

CVSS 3.1MEDIUM 4.2 Local High privileges User interaction EPSS 0.00196 Published 2026-01-21 Fixed in 2025.9.0 CWE-1046

TI-2025-41713 CVE-2025-68132

EVerest has out-of-bounds read in DZG_GSH01 SLIP CRC parser that can crash powermeter driver

MEDIUM 46

EVerest is an EV charging software stack.

CVSS 4.0LOW 2.4 Physical No auth No interaction EPSS 0.00289 Published 2026-01-21 Fixed in 2025.12.0 CWE-125

TI-2026-21022 CVE-2026-26008

EVerest has OOB via EVSE ID Indexing Mismatch in OCPP 2.0.1 UpdateAllowedEnergyTransferModes

LOW 33

EVerest is an EV charging software stack.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00373 Published 2026-03-26 Fixed in 2026.02.0 CWE-125

TI-2025-41722 CVE-2025-68141

EVerest vulnerable to null pointer dereference during DC_ChargeLoopRes document deserialization

LOW 32

EVerest is an EV charging software stack.

CVSS 3.1HIGH 7.4 Adjacent network No auth No interaction EPSS 0.00281 Published 2026-01-21 Fixed in 2025.10.0 CWE-476

TI-2026-21078 CVE-2026-26074

EVerest: OCPP201 startup event_queue lock mismatch leads to std::map/std::queue data race

LOW 30

EVerest is an EV charging software stack.

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.00146 Published 2026-03-26 Fixed in 2026.02.0 CWE-362

TI-2026-21077 CVE-2026-26073

EVerest: OCPP 1.6 heap corruption caused by lock-free insertion in event_queue

LOW 26

EVerest is an EV charging software stack.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00316 Published 2026-03-26 Fixed in 2026.02.0 CWE-122

TI-2026-22179 CVE-2026-27828

EVerest: ISO15118 session_setup use-after-free can crash EVSE process

LOW 25

EVerest is an EV charging software stack.

CVSS 4.0MEDIUM 5.5 Local No auth No interaction EPSS 0.00297 Published 2026-03-26 Fixed in 2026.02.0 CWE-416

TI-2026-22168 CVE-2026-27815

EVerest: ISO15118 session_setup payment options overflow can corrupt EVSE state

LOW 25

EVerest is an EV charging software stack.

CVSS 4.0MEDIUM 5.5 Local No auth No interaction EPSS 0.00283 Published 2026-03-26 Fixed in 2026.02.0 CWE-787

TI-2026-22169 CVE-2026-27816

EVerest's ISO15118 update_energy_transfer_modes overflow can corrupt EVSE state

LOW 24

EVerest is an EV charging software stack.

CVSS 4.0MEDIUM 5.5 Local No auth No interaction EPSS 0.00204 Published 2026-03-26 Fixed in 2026.02.0 CWE-787

TI-2026-19342 CVE-2026-24003

EvseV2G has sequence state validation bypass

LOW 24

EVerest is an EV charging software stack.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00279 Published 2026-01-26 No fix listed CWE-287

TI-2026-22166 CVE-2026-27813

EVerest has use-after-free in auth timeout timer via race condition

LOW 23

EVerest is an EV charging software stack.

CVSS 3.1MEDIUM 5.3 Physical No auth No interaction EPSS 0.00131 Published 2026-03-26 Fixed in 2026.02.0 CWE-416

TI-2026-21074 CVE-2026-26070

EVerest: OCPP 2.0.1 EV SoC Update Race Causes Charge Point Crash

LOW 20

EVerest is an EV charging software stack.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00107 Published 2026-03-26 Fixed in 2026.02.0 CWE-362

TI-2026-22167 CVE-2026-27814

EVerest EvseManager phase-switch path has unsynchronized shared-state access race condition

LOW 19

EVerest is an EV charging software stack.

CVSS 3.1MEDIUM 4.2 Adjacent network No auth No interaction EPSS 0.0014 Published 2026-03-26 Fixed in 2026.02.0 CWE-362

Open these records in search →