Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 10 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,897All CVEsplus 19,118 rejected
- 444Last 24 hours2,909 in the last 7 days
- 16,796Last 30 days1,552 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 11 | 18 | 1 | 0 | 30 | 33 |
| 2025 | 0 | 0 | 0 | 2 | 0 | 2 | 3 |
| 2024 | 1 | 0 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-33015 | EVerest has RemoteStop Bypass via BCB Toggle Session RestartEVerest · everest-core | Medium5.2 |
| CVE-2026-33014 | EVerest has Delayed Authorization Response Bypasses Termination After RemoteStopEVerest · everest-core | Medium5.2 |
| CVE-2026-33009 | EVerest: MQTT Switch-Phases Command Data Race Causing Charger State CorruptioEVerest · everest-core | High8.2 |
| CVE-2026-29044 | EVerest: Charging Continues When WithdrawAuthorization Is Processed Before TransactionStartedEVerest · everest-core | Medium5.0 |
| CVE-2026-27828 | EVerest: ISO15118 session_setup use-after-free can crash EVSE processEVerest · everest-core | Medium5.5 |
| CVE-2026-27816 | EVerest's ISO15118 update_energy_transfer_modes overflow can corrupt EVSE stateEVerest · everest-core | Medium5.5 |
| CVE-2026-27815 | EVerest: ISO15118 session_setup payment options overflow can corrupt EVSE stateEVerest · everest-core | Medium5.5 |
| CVE-2026-27814 | EVerest EvseManager phase-switch path has unsynchronized shared-state access race conditionEVerest · everest-core | Medium4.2 |
| CVE-2026-27813 | EVerest has use-after-free in auth timeout timer via race conditionEVerest · everest-core | Medium5.3 |
| CVE-2026-26074 | EVerest: OCPP201 startup event_queue lock mismatch leads to std::map/std::queue data raceEVerest · everest-core | High7.0 |
| CVE-2026-26073 | EVerest: OCPP 1.6 heap corruption caused by lock-free insertion in event_queueEVerest · everest-core | Medium5.9 |
| CVE-2026-26072 | EVerest has race-condition-induced std::map corruption in OCPP 1.6 evse_soc_mapEVerest · everest-core | Medium4.2 |
| CVE-2026-26071 | EVerest: OCPP 2.0.1 EVCCID Data Race Leads to Heap Use‑After‑FreeEVerest · everest-core | Medium4.2 |
| CVE-2026-26070 | EVerest: OCPP 2.0.1 EV SoC Update Race Causes Charge Point CrashEVerest · everest-core | Medium4.6 |
| CVE-2026-26008 | EVerest has OOB via EVSE ID Indexing Mismatch in OCPP 2.0.1 UpdateAllowedEnergyTransferModesEVerest · everest-core | High7.5 |
| CVE-2026-23995 | EVerest has stack buffer overflow in ifreq.ifr_name when interface name exceeds IFNAMSIZEVerest · everest-core | High8.4 |
| CVE-2026-22790 | EVerest's unchecked SLAC payload length causes stack overflow in HomeplugMessage::setup_payloadEVerest · everest-core | High8.8 |
| CVE-2026-22593 | EVerest has off-by-one stack buffer overflow in IsoMux certificate filename parsingEVerest · everest-core | High8.4 |
| CVE-2026-24003 | EvseV2G has sequence state validation bypassEVerest · everest-core | Medium4.3 |
| CVE-2025-68141 | EVerest vulnerable to null pointer dereference during DC_ChargeLoopRes document deserializationEVerest · everest-core | High7.4 |
| CVE-2025-68140 | EVerest allows null session ID to bypass session ID verificationEVerest · everest-core | Medium4.3 |
| CVE-2025-68139 | In EVerest, by default, the EV is responsible for closing the connection if the module encounters an error during request processingEVerest · everest-core | Medium4.3 |
| CVE-2025-68138 | EVerest affected by memory exhaustion in libocppEVerest · everest-core | Medium4.7 |
| CVE-2026-23955 | EVerest vulnerable to concatenation of strings literal and integersEVerest · everest-core | Medium4.2 |
| CVE-2025-68137 | EVerest's Integer Overflow and Signed to Unsigned conversion lead to either stack buffer overflow or infinite loopEVerest · everest-core | High8.4 |
| CVE-2025-68136 | EVerest's inadequate session handling can lead to memory-related errors or exhaustion of the operating system’s file descriptors, resulting in a denial of serviceEVerest · everest-core | High7.4 |
| CVE-2025-68135 | EVerest's inadequate exception handling leads to denial of serviceEVerest · everest-core | Medium6.5 |
| CVE-2025-68134 | EVerest's use of assert functions can potentially lead to denial of serviceEVerest · everest-core | High7.4 |
| CVE-2025-68132 | EVerest has out-of-bounds read in DZG_GSH01 SLIP CRC parser that can crash powermeter driverEVerest · everest-core | Low2.4 |
| CVE-2025-68133 | EVerest's unlimited connections can lead to DoS through operating system resource exhaustionEVerest · everest-core | High7.4 |
| CVE-2025-59399 | libocpp before 0.28.0 allows a denial of service (EVerest crash) because a secondary exception is thrown during error message generation.EVerest · libocpp | Low3.1 |
| CVE-2025-59398 | The OCPP implementation in libocpp before 0.26.2 allows a denial of service (EVerest crash) via JSON input larger than 255 characters, because a CiString<255>…EVerest · libocpp | Low3.1 |
| CVE-2024-37310 | EVerest has an integer overflow in the "v2g_incoming_v2gtp" functionEVerest · everest-core | Critical9.1 |