Linuxfoundation
Linuxfoundation Everest: vulnerabilidades y CVE
Linuxfoundation Everest tiene 29 vulnerabilidades publicadas, 29 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE29
Últimos 12 meses29
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-33015 | Media (5.2) | 0.20% | — | 26 mar 2026 | EVerest is an EV charging software stack. Prior to version 2026.02.0, even immediately after CSMS performs a RemoteStop (StopTransaction), the EVSE can return to `PrepareCharging` via the EV's BCB toggle, allowing… |
| CVE-2026-33014 | Media (5.2) | 0.19% | — | 26 mar 2026 | EVerest is an EV charging software stack. Prior to version 2026.02.0, during RemoteStop processing, a delayed authorization response restores `authorized` back to true, defeating the `stop_transaction()` call condition… |
| CVE-2026-33009 | Media (6.5) | 0.29% | — | 26 mar 2026 | EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to C++ UB (potential memory corruption). This is triggered by an MQTT… |
| CVE-2026-29044 | Media (6.5) | 0.31% | — | 26 mar 2026 | EVerest is an EV charging software stack. Prior to version 2026.02.0, when WithdrawAuthorization is processed before the TransactionStarted event, AuthHandler determines `transaction_active=false` and only calls… |
| CVE-2026-27828 | Media (5.5) | 0.33% | — | 26 mar 2026 | EVerest is an EV charging software stack. Prior to version 2026.02.0, ISO15118_chargerImpl::handle_session_setup uses v2g_ctx after it has been freed when ISO15118 initialization fails (e.g., no IPv6 link-local… |
| CVE-2026-27816 | Media (5.5) | 0.34% | — | 26 mar 2026 | EVerest is an EV charging software stack. Prior to versions to 2026.02.0, ISO15118_chargerImpl::handle_update_energy_transfer_modes copies a variable-length list into a fixed-size array of length 6 without bounds… |
| CVE-2026-27815 | Media (5.5) | 0.34% | — | 26 mar 2026 | EVerest is an EV charging software stack. Prior to versions to 2026.02.0, ISO15118_chargerImpl::handle_session_setup copies a variable-length payment_options list into a fixed-size array of length 2 without bounds… |
| CVE-2026-27814 | Media (4.2) | 0.15% | — | 26 mar 2026 | EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race (C++ UB) triggered by an A 1-phase ↔ 3-phase switch request (`ac_switch_three_phases_while_charging`) during charging/waiting… |
| CVE-2026-27813 | Media (5.3) | 0.18% | — | 26 mar 2026 | EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to use-after-free. This is triggered by EV plug-in/unplug and RFID/RemoteStart/OCPP authorization events (or delayed… |
| CVE-2026-26074 | Alta (7) | 0.22% | — | 26 mar 2026 | EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to possible `std::map<std::queue>` corruption. The trigger is CSMS GetLog/UpdateFirmware request (network) with an EVSE… |
| CVE-2026-26073 | Media (5.9) | 0.37% | — | 26 mar 2026 | EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to possible `std::queue`/`std::deque` corruption. The trigger is powermeter public key update and EV session/error events… |
| CVE-2026-26072 | Media (4.2) | 0.14% | — | 26 mar 2026 | EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to `std::map<std::optional>` concurrent access (container/optional corruption possible). The trigger is EV SoC update with… |
| CVE-2026-26071 | Media (4.2) | 0.14% | — | 26 mar 2026 | EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to `std::string` concurrent access. with heap-use-after-free possible. This is triggered by EVCCID update (EV/ISO15118) and… |
| CVE-2026-26070 | Media (4.2) | 0.15% | — | 26 mar 2026 | EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to `std::map<std::optional>` concurrent access (container/optional corruption possible). The trigger is an EV SoC update… |
| CVE-2026-26008 | Alta (7.5) | 0.46% | — | 26 mar 2026 | EVerest is an EV charging software stack. Versions prior to 2026.02.0 have an out-of-bounds access (std::vector) that leads to possible remote crash/memory corruption. This is because the CSMS sends… |
| CVE-2026-23995 | Alta (7.8) | 0.21% | — | 26 mar 2026 | EVerest is an EV charging software stack. Prior to version 2026.02.0, stack-based buffer overflow in CAN interface initialization: passing an interface name longer than IFNAMSIZ (16) to CAN open routines overflows… |
| CVE-2026-22790 | Alta (8.8) | 0.53% | — | 26 mar 2026 | EVerest is an EV charging software stack. Prior to version 2026.02.0, `HomeplugMessage::setup_payload` trusts `len` after an `assert`; in release builds the check is removed, so oversized SLAC payloads are `memcpy`'d… |
| CVE-2026-22593 | Alta (7.8) | 0.14% | — | 26 mar 2026 | EVerest is an EV charging software stack. Prior to version 2026.02.0, an off-by-one check in IsoMux certificate filename handling causes a stack-based buffer overflow when a filename length equals `MAX_FILE_NAME_LENGTH`… |
| CVE-2026-24003 | Media (5.3) | 0.28% | — | 26 ene 2026 | EVerest is an EV charging software stack. In versions up to and including 2025.12.1, it is possible to bypass the sequence state verification including authentication, and send requests that transition to forbidden… |
| CVE-2026-23955 | Media (4.2) | 0.19% | — | 21 ene 2026 | EVerest is an EV charging software stack. Prior to version 2025.9.0, in several places, integer values are concatenated to literal strings when throwing errors. This results in pointers arithmetic instead of printing… |
| CVE-2025-68141 | Alta (7.4) | 0.27% | — | 21 ene 2026 | EVerest is an EV charging software stack. Prior to version 2025.10.0, during the deserialization of a `DC_ChargeLoopRes` message that includes Receipt as well as TaxCosts, the vector `<DetailedTax>tax_costs` in the… |
| CVE-2025-68140 | Media (4.3) | 0.15% | — | 21 ene 2026 | EVerest is an EV charging software stack. Prior to version 2025.9.0, once the validity of the received V2G message has been verified, it is checked whether the submitted session ID matches the registered one. However,… |
| CVE-2025-68139 | Media (4.3) | 0.16% | — | 21 ene 2026 | EVerest is an EV charging software stack. In all versions up to and including 2025.12.1, the default value for `terminate_connection_on_failed_response` is `False`, which leaves the responsibility for session and… |
| CVE-2025-68137 | Alta (8.3) | 1.3% | — | 21 ene 2026 | EVerest is an EV charging software stack. Prior to version 2025.10.0, an integer overflow occurring in `SdpPacket::parse_header()` allows the current buffer length to be set to 7 after a complete header of size 8 has… |
| CVE-2025-68136 | Alta (7.4) | 0.29% | — | 21 ene 2026 | EVerest is an EV charging software stack. Prior to version 2025.10.0, once the module receives a SDP request, it creates a whole new set of objects like `Session`, `IConnection` which open new TCP socket for the… |
| CVE-2025-68135 | Media (6.5) | 0.32% | — | 21 ene 2026 | EVerest is an EV charging software stack. Prior to version 2025.10.0, C++ exceptions are not properly handled for and by the `TbdController` loop, leading to its caller and itself to silently terminates. Thus, this… |
| CVE-2025-68134 | Alta (7.4) | 0.17% | — | 21 ene 2026 | EVerest is an EV charging software stack. Prior to version 2025.10.0, the use of the `assert` function to handle errors frequently causes the module to crash. This is particularly critical because the manager shuts down… |
| CVE-2025-68132 | Baja (2.4) | 0.28% | — | 21 ene 2026 | EVerest is an EV charging software stack. Prior to version 2025.12.0, `is_message_crc_correct` in the DZG_GSH01 powermeter SLIP parser reads `vec[vec.size()-1]` and `vec[vec.size()-2]` without checking that at least two… |
| CVE-2025-68133 | Alta (7.4) | 0.39% | — | 21 ene 2026 | EVerest is an EV charging software stack. In versions 2025.9.0 and below, an attacker can exhaust the operating system's memory and cause the module to terminate by initiating an unlimited number of TCP connections that… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.