Everest Core
Approved changes feed: RSS · Atom
cpe:2.3:a:everest:everest-core:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Everest (5ce5f781-0f4d-52d5-a8fb-10fc87d01244) |
|---|---|
| Product | Everest Core (d1c1c20c-0b31-5b7c-a454-b07e7f8d3353) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-33015 |
vulnerable | 2026-06-08 07:57:18.463507 |
EVerest has RemoteStop Bypass via BCB Toggle Session Restart
MEDIUM (5.2)
EVerest is an EV charging software stack. Prior to version 2026.02.0, even immediately after CSMS performs a RemoteStop (StopTransaction), the EVSE can return to `PrepareCharging` via the EV's BCB toggle, allowing session restart. This breaks the irreversibility of remote stop and can bypass operational/billing/safety controls. Version 2026.02.0 contains a patch.
Published: 2026-03-26T16:42:50.695Z
Updated: 2026-03-26T17:35:07.268Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-33014 |
vulnerable | 2026-06-08 07:57:18.463108 |
EVerest has Delayed Authorization Response Bypasses Termination After RemoteStop
MEDIUM (5.2)
EVerest is an EV charging software stack. Prior to version 2026.02.0, during RemoteStop processing, a delayed authorization response restores `authorized` back to true, defeating the `stop_transaction()` call condition on PowerOff events. As a result, the transaction can remain open even after a remote stop. Version 2026.02.0 contains a patch.
Published: 2026-03-26T16:40:40.062Z
Updated: 2026-03-26T18:24:11.044Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-33009 |
vulnerable | 2026-06-08 07:57:18.455461 |
EVerest: MQTT Switch-Phases Command Data Race Causing Charger State Corruptio
HIGH (8.2)
EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to C++ UB (potential memory corruption). This is triggered by an MQTT `everest_external/nodered/{connector}/cmd/switch_three_phases_while_charging` message and results in `Charger::shared_context` / `internal_context` accessed concurrently without lock. Version 2026.02.0 contains a patch.
Published: 2026-03-26T16:39:30.268Z
Updated: 2026-03-28T02:26:05.370Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-29044 |
vulnerable | 2026-06-08 07:55:16.024599 |
EVerest: Charging Continues When WithdrawAuthorization Is Processed Before TransactionStarted
MEDIUM (5)
EVerest is an EV charging software stack. Prior to version 2026.02.0, when WithdrawAuthorization is processed before the TransactionStarted event, AuthHandler determines `transaction_active=false` and only calls `withdraw_authorization_callback`. This path ultimately calls `Charger::deauthorize()`, but no actual stop (StopTransaction) occurs in the Charging state. As a result, authorization withdrawal can be defeated by timing, allowing charging to continue. Version 2026.02.0 contains a patch.
Published: 2026-03-26T16:37:33.230Z
Updated: 2026-03-26T18:50:00.493Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27828 |
vulnerable | 2026-06-08 07:55:14.024772 |
EVerest: ISO15118 session_setup use-after-free can crash EVSE process
EVerest is an EV charging software stack. Prior to version 2026.02.0, ISO15118_chargerImpl::handle_session_setup uses v2g_ctx after it has been freed when ISO15118 initialization fails (e.g., no IPv6 link-local address). The EVSE process can be crashed remotely by an attacker with MQTT access who issues a session_setup command while v2g_ctx has been released. Version 2026.02.0 contains a patch.
Published: 2026-03-26T16:34:23.623Z
Updated: 2026-03-27T14:43:59.252Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27816 |
vulnerable | 2026-06-08 07:55:13.933547 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27815 |
vulnerable | 2026-06-08 07:55:13.933086 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27814 |
vulnerable | 2026-06-08 07:55:13.932532 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27813 |
vulnerable | 2026-06-08 07:55:13.931186 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-26074 |
vulnerable | 2026-06-08 07:53:20.771849 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-26073 |
vulnerable | 2026-06-08 07:53:20.771484 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-26072 |
vulnerable | 2026-06-08 07:53:20.771115 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-26071 |
vulnerable | 2026-06-08 07:53:20.770828 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-26070 |
vulnerable | 2026-06-08 07:53:20.770392 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-26008 |
vulnerable | 2026-06-08 07:53:20.701821 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24003 |
vulnerable | 2026-06-08 07:51:16.514094 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-23995 |
vulnerable | 2026-06-08 07:51:16.503720 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-23955 |
vulnerable | 2026-06-08 07:51:16.457310 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22790 |
vulnerable | 2026-06-08 07:51:13.923913 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22593 |
vulnerable | 2026-06-08 07:51:13.259530 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-68141 |
vulnerable | 2026-06-08 07:41:20.865070 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-68140 |
vulnerable | 2026-06-08 07:41:20.864700 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-68139 |
vulnerable | 2026-06-08 07:41:20.864317 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-68138 |
vulnerable | 2026-06-08 07:41:20.861342 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-68137 |
vulnerable | 2026-06-08 07:41:20.861086 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-68136 |
vulnerable | 2026-06-08 07:41:20.860745 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-68135 |
vulnerable | 2026-06-08 07:41:20.860369 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-68134 |
vulnerable | 2026-06-08 07:41:20.860002 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-68133 |
vulnerable | 2026-06-08 07:41:20.859606 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-68132 |
vulnerable | 2026-06-08 07:41:20.858251 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37310 |
vulnerable | 2026-06-08 06:39:47.114377 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.