Everest vulnerabilities
33 CVEs and advisories name Everest as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-33015EVerest has RemoteStop Bypass via BCB Toggle Session Restart
- CVE-2026-33014EVerest has Delayed Authorization Response Bypasses Termination After RemoteStop
- CVE-2026-33009EVerest: MQTT Switch-Phases Command Data Race Causing Charger State Corruptio
- CVE-2026-29044EVerest: Charging Continues When WithdrawAuthorization Is Processed Before TransactionStarted
- CVE-2026-27828EVerest: ISO15118 session_setup use-after-free can crash EVSE process
- CVE-2026-27816EVerest's ISO15118 update_energy_transfer_modes overflow can corrupt EVSE state
- CVE-2026-27815EVerest: ISO15118 session_setup payment options overflow can corrupt EVSE state
- CVE-2026-27814EVerest EvseManager phase-switch path has unsynchronized shared-state access race condition
- CVE-2026-27813EVerest has use-after-free in auth timeout timer via race condition
- CVE-2026-26074EVerest: OCPP201 startup event_queue lock mismatch leads to std::map/std::queue data race
- CVE-2026-26073EVerest: OCPP 1.6 heap corruption caused by lock-free insertion in event_queue
- CVE-2026-26072EVerest has race-condition-induced std::map corruption in OCPP 1.6 evse_soc_map
- CVE-2026-26071EVerest: OCPP 2.0.1 EVCCID Data Race Leads to Heap Use‑After‑Free
- CVE-2026-26070EVerest: OCPP 2.0.1 EV SoC Update Race Causes Charge Point Crash
- CVE-2026-26008EVerest has OOB via EVSE ID Indexing Mismatch in OCPP 2.0.1 UpdateAllowedEnergyTransferModes
- CVE-2026-23995EVerest has stack buffer overflow in ifreq.ifr_name when interface name exceeds IFNAMSIZ
- CVE-2026-22790EVerest's unchecked SLAC payload length causes stack overflow in HomeplugMessage::setup_payload
- CVE-2026-22593EVerest has off-by-one stack buffer overflow in IsoMux certificate filename parsing
- CVE-2026-24003EvseV2G has sequence state validation bypass
- CVE-2025-68141EVerest vulnerable to null pointer dereference during DC_ChargeLoopRes document deserialization
- CVE-2025-68140EVerest allows null session ID to bypass session ID verification
- CVE-2025-68139In EVerest, by default, the EV is responsible for closing the connection if the module encounters an error during request processing
- CVE-2025-68138EVerest affected by memory exhaustion in libocpp
- CVE-2026-23955EVerest vulnerable to concatenation of strings literal and integers
- CVE-2025-68137EVerest's Integer Overflow and Signed to Unsigned conversion lead to either stack buffer overflow or infinite loop
- CVE-2025-68136EVerest's inadequate session handling can lead to memory-related errors or exhaustion of the operating system’s file descriptors, resulting in a denial of service
- CVE-2025-68135EVerest's inadequate exception handling leads to denial of service
- CVE-2025-68134EVerest's use of assert functions can potentially lead to denial of service
- CVE-2025-68132EVerest has out-of-bounds read in DZG_GSH01 SLIP CRC parser that can crash powermeter driver
- CVE-2025-68133EVerest's unlimited connections can lead to DoS through operating system resource exhaustion