Skip to contentEverest Everest-core vulnerabilities
- linuxfoundation everest, everest everest-core +1 moreEVerest has RemoteStop Bypass via BCB Toggle Session RestartCVE-2026-330155.2 Medium
- linuxfoundation everest, everest everest-core +1 moreEVerest has Delayed Authorization Response Bypasses Termination After RemoteStopCVE-2026-330145.2 Medium
- linuxfoundation everest, everest everest-core +1 moreEVerest: MQTT Switch-Phases Command Data Race Causing Charger State CorruptioCVE-2026-330098.2 High
- linuxfoundation everest, everest everest-core +1 moreEVerest: Charging Continues When WithdrawAuthorization Is Processed Before TransactionStartedCVE-2026-290445.0 Medium
- linuxfoundation everest, everest everest-core +1 moreEVerest: ISO15118 session_setup use-after-free can crash EVSE processCVE-2026-278285.5 Medium
- linuxfoundation everest, everest everest-core +1 moreEVerest's ISO15118 update_energy_transfer_modes overflow can corrupt EVSE stateCVE-2026-278165.5 Medium
- linuxfoundation everest, everest everest-core +1 moreEVerest: ISO15118 session_setup payment options overflow can corrupt EVSE stateCVE-2026-278155.5 Medium
- linuxfoundation everest, everest everest-core +1 moreEVerest EvseManager phase-switch path has unsynchronized shared-state access race conditionCVE-2026-278144.2 Medium
- linuxfoundation everest, everest everest-core +1 moreEVerest has use-after-free in auth timeout timer via race conditionCVE-2026-278135.3 Medium
- linuxfoundation everest, everest everest-core +1 moreEVerest: OCPP201 startup event_queue lock mismatch leads to std::map/std::queue data raceCVE-2026-260747.0 High
- linuxfoundation everest, everest everest-core +1 moreEVerest: OCPP 1.6 heap corruption caused by lock-free insertion in event_queueCVE-2026-260735.9 Medium
- linuxfoundation everest, everest everest-core +1 moreEVerest has race-condition-induced std::map corruption in OCPP 1.6 evse_soc_mapCVE-2026-260724.2 Medium
- linuxfoundation everest, everest everest-core +1 moreEVerest: OCPP 2.0.1 EVCCID Data Race Leads to Heap Use‑After‑FreeCVE-2026-260714.2 Medium
- linuxfoundation everest, everest everest-core +1 moreEVerest: OCPP 2.0.1 EV SoC Update Race Causes Charge Point CrashCVE-2026-260704.6 Medium
- linuxfoundation everest, everest everest-core +1 moreEVerest has OOB via EVSE ID Indexing Mismatch in OCPP 2.0.1 UpdateAllowedEnergyTransferModesCVE-2026-260087.5 High
- linuxfoundation everest, everest everest-core +1 moreEVerest has stack buffer overflow in ifreq.ifr_name when interface name exceeds IFNAMSIZCVE-2026-239958.4 High
- linuxfoundation everest, everest everest-core +1 moreEVerest's unchecked SLAC payload length causes stack overflow in HomeplugMessage::setup_payloadCVE-2026-227908.8 High
- linuxfoundation everest, everest everest-core +1 moreEVerest has off-by-one stack buffer overflow in IsoMux certificate filename parsingCVE-2026-225938.4 High
- linuxfoundation everest, everest everest-core +1 moreEvseV2G has sequence state validation bypassCVE-2026-240034.3 Medium
- linuxfoundation everest, everest everest-core +1 moreEVerest vulnerable to null pointer dereference during DC_ChargeLoopRes document deserializationCVE-2025-681417.4 High
- linuxfoundation everest, everest everest-core +1 moreEVerest allows null session ID to bypass session ID verificationCVE-2025-681404.3 Medium
- linuxfoundation everest, everest everest-core +1 moreIn EVerest, by default, the EV is responsible for closing the connection if the module encounters an error during request processingCVE-2025-681394.3 Medium
- linuxfoundation libocpp, everest everest-core +1 moreEVerest affected by memory exhaustion in libocppCVE-2025-681384.7 Medium
- linuxfoundation everest, everest everest-core +1 moreEVerest vulnerable to concatenation of strings literal and integersCVE-2026-239554.2 Medium
- linuxfoundation everest, everest everest-core +1 moreEVerest's Integer Overflow and Signed to Unsigned conversion lead to either stack buffer overflow or infinite loopCVE-2025-68137Public exploit8.4 High
- linuxfoundation everest, everest everest-core +1 moreEVerest's inadequate session handling can lead to memory-related errors or exhaustion of the operating system’s file descriptors, resulting in a denial of serviceCVE-2025-681367.4 High
- linuxfoundation everest, everest everest-core +1 moreEVerest's inadequate exception handling leads to denial of serviceCVE-2025-681356.5 Medium
- linuxfoundation everest, everest everest-core +1 moreEVerest's use of assert functions can potentially lead to denial of serviceCVE-2025-681347.4 High
- linuxfoundation everest, everest everest-core +1 moreEVerest has out-of-bounds read in DZG_GSH01 SLIP CRC parser that can crash powermeter driverCVE-2025-681322.4 Low
- linuxfoundation everest, everest everest-core +1 moreEVerest's unlimited connections can lead to DoS through operating system resource exhaustionCVE-2025-681337.4 High
- everest everest-coreEVerest has an integer overflow in the "v2g_incoming_v2gtp" functionCVE-2024-373109.1 Critical