Everest
Linux · 29 CVEs
EVerest has RemoteStop Bypass via BCB Toggle Session Restart
Mar 26, 2026
EVerest has Delayed Authorization Response Bypasses Termination After RemoteStop
Mar 26, 2026
EVerest: MQTT Switch-Phases Command Data Race Causing Charger State Corruptio
Mar 26, 2026
EVerest: Charging Continues When WithdrawAuthorization Is Processed Before TransactionStarted
Mar 26, 2026
EVerest: ISO15118 session_setup use-after-free can crash EVSE process
Mar 26, 2026
EVerest's ISO15118 update_energy_transfer_modes overflow can corrupt EVSE state
Mar 26, 2026
EVerest: ISO15118 session_setup payment options overflow can corrupt EVSE state
Mar 26, 2026
EVerest EvseManager phase-switch path has unsynchronized shared-state access race condition
Mar 26, 2026
EVerest has use-after-free in auth timeout timer via race condition
Mar 26, 2026
EVerest: OCPP201 startup event_queue lock mismatch leads to std::map/std::queue data race
Mar 26, 2026
EVerest: OCPP 1.6 heap corruption caused by lock-free insertion in event_queue
Mar 26, 2026
EVerest has race-condition-induced std::map corruption in OCPP 1.6 evse_soc_map
Mar 26, 2026
EVerest: OCPP 2.0.1 EVCCID Data Race Leads to Heap Use‑After‑Free
Mar 26, 2026
EVerest: OCPP 2.0.1 EV SoC Update Race Causes Charge Point Crash
Mar 26, 2026
EVerest has OOB via EVSE ID Indexing Mismatch in OCPP 2.0.1 UpdateAllowedEnergyTransferModes
Mar 26, 2026
EVerest has stack buffer overflow in ifreq.ifr_name when interface name exceeds IFNAMSIZ
Mar 26, 2026
EVerest's unchecked SLAC payload length causes stack overflow in HomeplugMessage::setup_payload
Mar 26, 2026
EVerest has off-by-one stack buffer overflow in IsoMux certificate filename parsing
Mar 26, 2026
EvseV2G has sequence state validation bypass
Jan 26, 2026
EVerest vulnerable to null pointer dereference during DC_ChargeLoopRes document deserialization
Jan 21, 2026
EVerest allows null session ID to bypass session ID verification
Jan 21, 2026
In EVerest, by default, the EV is responsible for closing the connection if the module encounters an error during reque…
Jan 21, 2026
EVerest vulnerable to concatenation of strings literal and integers
Jan 21, 2026
EVerest's Integer Overflow and Signed to Unsigned conversion lead to either stack buffer overflow or infinite loop
Jan 21, 2026
EVerest's inadequate session handling can lead to memory-related errors or exhaustion of the operating system’s file de…
Jan 21, 2026
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-33015 | EVerest has RemoteStop Bypass via BCB Toggle Session Restart | MEDIUM | 0.20% | Mar 26, 2026 |
| CVE-2026-33014 | EVerest has Delayed Authorization Response Bypasses Termination After RemoteStop | MEDIUM | 0.19% | Mar 26, 2026 |
| CVE-2026-33009 | EVerest: MQTT Switch-Phases Command Data Race Causing Charger State Corruptio | HIGH | 0.29% | Mar 26, 2026 |
| CVE-2026-29044 | EVerest: Charging Continues When WithdrawAuthorization Is Processed Before TransactionStarted | MEDIUM | 0.31% | Mar 26, 2026 |
| CVE-2026-27828 | EVerest: ISO15118 session_setup use-after-free can crash EVSE process | MEDIUM | 0.33% | Mar 26, 2026 |
| CVE-2026-27816 | EVerest's ISO15118 update_energy_transfer_modes overflow can corrupt EVSE state | MEDIUM | 0.34% | Mar 26, 2026 |
| CVE-2026-27815 | EVerest: ISO15118 session_setup payment options overflow can corrupt EVSE state | MEDIUM | 0.34% | Mar 26, 2026 |
| CVE-2026-27814 | EVerest EvseManager phase-switch path has unsynchronized shared-state access race condition | MEDIUM | 0.15% | Mar 26, 2026 |
| CVE-2026-27813 | EVerest has use-after-free in auth timeout timer via race condition | MEDIUM | 0.18% | Mar 26, 2026 |
| CVE-2026-26074 | EVerest: OCPP201 startup event_queue lock mismatch leads to std::map/std::queue data race | HIGH | 0.22% | Mar 26, 2026 |
| CVE-2026-26073 | EVerest: OCPP 1.6 heap corruption caused by lock-free insertion in event_queue | MEDIUM | 0.37% | Mar 26, 2026 |
| CVE-2026-26072 | EVerest has race-condition-induced std::map corruption in OCPP 1.6 evse_soc_map | MEDIUM | 0.14% | Mar 26, 2026 |
| CVE-2026-26071 | EVerest: OCPP 2.0.1 EVCCID Data Race Leads to Heap Use‑After‑Free | MEDIUM | 0.14% | Mar 26, 2026 |
| CVE-2026-26070 | EVerest: OCPP 2.0.1 EV SoC Update Race Causes Charge Point Crash | MEDIUM | 0.15% | Mar 26, 2026 |
| CVE-2026-26008 | EVerest has OOB via EVSE ID Indexing Mismatch in OCPP 2.0.1 UpdateAllowedEnergyTransferModes | HIGH | 0.46% | Mar 26, 2026 |
| CVE-2026-23995 | EVerest has stack buffer overflow in ifreq.ifr_name when interface name exceeds IFNAMSIZ | HIGH | 0.21% | Mar 26, 2026 |
| CVE-2026-22790 | EVerest's unchecked SLAC payload length causes stack overflow in HomeplugMessage::setup_payload | HIGH | 0.53% | Mar 26, 2026 |
| CVE-2026-22593 | EVerest has off-by-one stack buffer overflow in IsoMux certificate filename parsing | HIGH | 0.14% | Mar 26, 2026 |
| CVE-2026-24003 | EvseV2G has sequence state validation bypass | MEDIUM | 0.28% | Jan 26, 2026 |
| CVE-2025-68141 | EVerest vulnerable to null pointer dereference during DC_ChargeLoopRes document deserialization | HIGH | 0.27% | Jan 21, 2026 |
| CVE-2025-68140 | EVerest allows null session ID to bypass session ID verification | MEDIUM | 0.15% | Jan 21, 2026 |
| CVE-2025-68139 | In EVerest, by default, the EV is responsible for closing the connection if the module encounters an error during request processing | MEDIUM | 0.16% | Jan 21, 2026 |
| CVE-2026-23955 | EVerest vulnerable to concatenation of strings literal and integers | MEDIUM | 0.19% | Jan 21, 2026 |
| CVE-2025-68137 | EVerest's Integer Overflow and Signed to Unsigned conversion lead to either stack buffer overflow or infinite loop | HIGH | 1.27% | Jan 21, 2026 |
| CVE-2025-68136 | EVerest's inadequate session handling can lead to memory-related errors or exhaustion of the operating system’s file descriptors, resulting in a denial of serv… | HIGH | 0.29% | Jan 21, 2026 |
Showing 1 to 25 of 29 CVEs