EEVerest

Products

Exploited and recent CVEs

• CVE-2026-33015 Medium 5.2 EVerest has RemoteStop Bypass via BCB Toggle Session Restart 0.2%
• CVE-2026-33014 Medium 5.2 EVerest has Delayed Authorization Response Bypasses Termination After RemoteStop 0.2%
• CVE-2026-33009 High 8.2 EVerest: MQTT Switch-Phases Command Data Race Causing Charger State Corruptio 0.3%
• CVE-2026-29044 Medium 5.0 EVerest: Charging Continues When WithdrawAuthorization Is Processed Before TransactionStarted 0.3%
• CVE-2026-27828 Medium 5.5 EVerest: ISO15118 session_setup use-after-free can crash EVSE process 0.3%
• CVE-2026-27816 Medium 5.5 EVerest's ISO15118 update_energy_transfer_modes overflow can corrupt EVSE state 0.2%
• CVE-2026-27815 Medium 5.5 EVerest: ISO15118 session_setup payment options overflow can corrupt EVSE state 0.3%
• CVE-2026-27814 Medium 4.2 EVerest EvseManager phase-switch path has unsynchronized shared-state access race condition 0.1%
• CVE-2026-27813 Medium 5.3 EVerest has use-after-free in auth timeout timer via race condition 0.1%
• CVE-2026-26074 High 7.0 EVerest: OCPP201 startup event_queue lock mismatch leads to std::map/std::queue data race 0.1%
• CVE-2026-26073 Medium 5.9 EVerest: OCPP 1.6 heap corruption caused by lock-free insertion in event_queue 0.3%
• CVE-2026-26072 Medium 4.2 EVerest has race-condition-induced std::map corruption in OCPP 1.6 evse_soc_map 0.1%
• CVE-2026-26071 Medium 4.2 EVerest: OCPP 2.0.1 EVCCID Data Race Leads to Heap Use‑After‑Free 0.1%
• CVE-2026-26070 Medium 4.6 EVerest: OCPP 2.0.1 EV SoC Update Race Causes Charge Point Crash 0.1%
• CVE-2026-26008 High 7.5 EVerest has OOB via EVSE ID Indexing Mismatch in OCPP 2.0.1 UpdateAllowedEnergyTransferModes 0.4%
• CVE-2026-23995 High 8.4 EVerest has stack buffer overflow in ifreq.ifr_name when interface name exceeds IFNAMSIZ 0.2%
• CVE-2026-22790 High 8.8 EVerest's unchecked SLAC payload length causes stack overflow in HomeplugMessage::setup_payload 0.6%
• CVE-2026-22593 High 8.4 EVerest has off-by-one stack buffer overflow in IsoMux certificate filename parsing 0.1%
• CVE-2026-24003 Medium 4.3 EvseV2G has sequence state validation bypass 0.3%
• CVE-2025-68141 High 7.4 EVerest vulnerable to null pointer dereference during DC_ChargeLoopRes document deserialization 0.3%
• CVE-2025-68140 Medium 4.3 EVerest allows null session ID to bypass session ID verification 0.2%
• CVE-2025-68139 Medium 4.3 In EVerest, by default, the EV is responsible for closing the connection if the module encounters an error during request processing 0.2%
• CVE-2025-68138 Medium 4.7 EVerest affected by memory exhaustion in libocpp 0.2%
• CVE-2026-23955 Medium 4.2 EVerest vulnerable to concatenation of strings literal and integers 0.2%
• CVE-2025-68137 High 8.4 EVerest's Integer Overflow and Signed to Unsigned conversion lead to either stack buffer overflow or infinite loop 1.3%
• CVE-2025-68136 High 7.4 EVerest's inadequate session handling can lead to memory-related errors or exhaustion of the operating system’s file descriptors, resulting in a denial of service 0.3%
• CVE-2025-68135 Medium 6.5 EVerest's inadequate exception handling leads to denial of service 0.3%
• CVE-2025-68134 High 7.4 EVerest's use of assert functions can potentially lead to denial of service 0.2%
• CVE-2025-68132 Low 2.4 EVerest has out-of-bounds read in DZG_GSH01 SLIP CRC parser that can crash powermeter driver 0.3%
• CVE-2025-68133 High 7.4 EVerest's unlimited connections can lead to DoS through operating system resource exhaustion 0.4%