Vulnerabilities

TI-2026-25462 CVE-2026-33015

EVerest has RemoteStop Bypass via BCB Toggle Session Restart

MEDIUM 57

EVerest is an EV charging software stack.

CVSS 3.1MEDIUM 5.2 Physical No auth No interaction EPSS 0.00222 Published 2026-03-26 Fixed in 2026.02.0 CWE-863

TI-2026-25461 CVE-2026-33014

EVerest has Delayed Authorization Response Bypasses Termination After RemoteStop

MEDIUM 57

EVerest is an EV charging software stack.

CVSS 3.1MEDIUM 5.2 Physical No auth No interaction EPSS 0.00217 Published 2026-03-26 Fixed in 2026.02.0 CWE-863

TI-2026-25456 CVE-2026-33009

EVerest: MQTT Switch-Phases Command Data Race Causing Charger State Corruptio

HIGH 75

EVerest is an EV charging software stack.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00253 Published 2026-03-26 Fixed in 2026.02.0 CWE-362

TI-2026-23189 CVE-2026-29044

EVerest: Charging Continues When WithdrawAuthorization Is Processed Before TransactionStarted

MEDIUM 62

EVerest is an EV charging software stack.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00299 Published 2026-03-26 Fixed in 2026.02.0 CWE-863

TI-2026-22179 CVE-2026-27828

EVerest: ISO15118 session_setup use-after-free can crash EVSE process

LOW 25

EVerest is an EV charging software stack.

CVSS 4.0MEDIUM 5.5 Local No auth No interaction EPSS 0.00297 Published 2026-03-26 Fixed in 2026.02.0 CWE-416

TI-2026-22169 CVE-2026-27816

EVerest's ISO15118 update_energy_transfer_modes overflow can corrupt EVSE state

LOW 24

EVerest is an EV charging software stack.

CVSS 4.0MEDIUM 5.5 Local No auth No interaction EPSS 0.00204 Published 2026-03-26 Fixed in 2026.02.0 CWE-787

TI-2026-22168 CVE-2026-27815

EVerest: ISO15118 session_setup payment options overflow can corrupt EVSE state

LOW 25

EVerest is an EV charging software stack.

CVSS 4.0MEDIUM 5.5 Local No auth No interaction EPSS 0.00283 Published 2026-03-26 Fixed in 2026.02.0 CWE-787

TI-2026-22167 CVE-2026-27814

EVerest EvseManager phase-switch path has unsynchronized shared-state access race condition

LOW 19

EVerest is an EV charging software stack.

CVSS 3.1MEDIUM 4.2 Adjacent network No auth No interaction EPSS 0.0014 Published 2026-03-26 Fixed in 2026.02.0 CWE-362

TI-2026-22166 CVE-2026-27813

EVerest has use-after-free in auth timeout timer via race condition

LOW 23

EVerest is an EV charging software stack.

CVSS 3.1MEDIUM 5.3 Physical No auth No interaction EPSS 0.00131 Published 2026-03-26 Fixed in 2026.02.0 CWE-416

TI-2026-21078 CVE-2026-26074

EVerest: OCPP201 startup event_queue lock mismatch leads to std::map/std::queue data race

LOW 30

EVerest is an EV charging software stack.

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.00146 Published 2026-03-26 Fixed in 2026.02.0 CWE-362

TI-2026-21077 CVE-2026-26073

EVerest: OCPP 1.6 heap corruption caused by lock-free insertion in event_queue

LOW 26

EVerest is an EV charging software stack.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00316 Published 2026-03-26 Fixed in 2026.02.0 CWE-122

TI-2026-21076 CVE-2026-26072

EVerest has race-condition-induced std::map corruption in OCPP 1.6 evse_soc_map

LOW 19

EVerest is an EV charging software stack.

CVSS 3.1MEDIUM 4.2 Physical No auth No interaction EPSS 0.00139 Published 2026-03-26 Fixed in 2026.02.0 CWE-362

TI-2026-21075 CVE-2026-26071

EVerest: OCPP 2.0.1 EVCCID Data Race Leads to Heap Use‑After‑Free

LOW 19

EVerest is an EV charging software stack.

CVSS 3.1MEDIUM 4.2 Physical No auth No interaction EPSS 0.00139 Published 2026-03-26 Fixed in 2026.02.0 CWE-362

TI-2026-21074 CVE-2026-26070

EVerest: OCPP 2.0.1 EV SoC Update Race Causes Charge Point Crash

LOW 20

EVerest is an EV charging software stack.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00107 Published 2026-03-26 Fixed in 2026.02.0 CWE-362

TI-2026-21022 CVE-2026-26008

EVerest has OOB via EVSE ID Indexing Mismatch in OCPP 2.0.1 UpdateAllowedEnergyTransferModes

LOW 33

EVerest is an EV charging software stack.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00373 Published 2026-03-26 Fixed in 2026.02.0 CWE-125

TI-2026-19334 CVE-2026-23995

EVerest has stack buffer overflow in ifreq.ifr_name when interface name exceeds IFNAMSIZ

HIGH 72

EVerest is an EV charging software stack.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00215 Published 2026-03-26 Fixed in 2026.02.0 CWE-121

TI-2026-18308 CVE-2026-22790

EVerest's unchecked SLAC payload length causes stack overflow in HomeplugMessage::setup_payload

HIGH 73

EVerest is an EV charging software stack.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00551 Published 2026-03-26 Fixed in 2026.02.0 CWE-121

TI-2026-18154 CVE-2026-22593

EVerest has off-by-one stack buffer overflow in IsoMux certificate filename parsing

HIGH 72

EVerest is an EV charging software stack.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.0014 Published 2026-03-26 Fixed in 2026.02.0 CWE-193

TI-2026-19342 CVE-2026-24003

EvseV2G has sequence state validation bypass

LOW 24

EVerest is an EV charging software stack.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00279 Published 2026-01-26 No fix listed CWE-287

TI-2025-41722 CVE-2025-68141

EVerest vulnerable to null pointer dereference during DC_ChargeLoopRes document deserialization

LOW 32

EVerest is an EV charging software stack.

CVSS 3.1HIGH 7.4 Adjacent network No auth No interaction EPSS 0.00281 Published 2026-01-21 Fixed in 2025.10.0 CWE-476

TI-2025-41721 CVE-2025-68140

EVerest allows null session ID to bypass session ID verification

LOW 19

EVerest is an EV charging software stack.

CVSS 3.1MEDIUM 4.3 Adjacent network No auth No interaction EPSS 0.00154 Published 2026-01-21 Fixed in 2025.9.0 CWE-863

TI-2025-41720 CVE-2025-68139

Session fixation in everest-core

LOW 19

EVerest is an EV charging software stack.

CVSS 3.1MEDIUM 4.3 Adjacent network No auth No interaction EPSS 0.00165 Published 2026-01-21 No fix listed CWE-384

TI-2025-41719 CVE-2025-68138

EVerest affected by memory exhaustion in libocpp

LOW 21

EVerest is an EV charging software stack, and EVerest libocpp is a C++ implementation of the Open Charge Point Protocol.

CVSS 3.1MEDIUM 4.7 Adjacent network No auth No interaction EPSS 0.00183 Published 2026-01-21 No fix listed CWE-770

TI-2026-19297 CVE-2026-23955

EVerest vulnerable to concatenation of strings literal and integers

MEDIUM 53

EVerest is an EV charging software stack.

CVSS 3.1MEDIUM 4.2 Local High privileges User interaction EPSS 0.00196 Published 2026-01-21 Fixed in 2025.9.0 CWE-1046

TI-2025-41718 CVE-2025-68137

EVerest's Integer Overflow and Signed to Unsigned conversion lead to either stack buffer overflow or infinite loop

HIGH 72

EVerest is an EV charging software stack.

CVSS 3.1HIGH 8.4 Adjacent network No auth No interaction EPSS 0.01308 Published 2026-01-21 Fixed in 2025.10.0 CWE-120

Vulnerabilities

Filters