EVerest vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20252
3. 202630

Newest CVEs

• CVE-2026-33015

  EVerest has RemoteStop Bypass via BCB Toggle Session Restart

  EVerest · everest-core

  Medium5.2
• CVE-2026-33014

  EVerest has Delayed Authorization Response Bypasses Termination After RemoteStop

  EVerest · everest-core

  Medium5.2
• CVE-2026-33009

  EVerest: MQTT Switch-Phases Command Data Race Causing Charger State Corruptio

  EVerest · everest-core

  High8.2
• CVE-2026-29044

  EVerest: Charging Continues When WithdrawAuthorization Is Processed Before TransactionStarted

  EVerest · everest-core

  Medium5.0
• CVE-2026-27828

  EVerest: ISO15118 session_setup use-after-free can crash EVSE process

  EVerest · everest-core

  Medium5.5
• CVE-2026-27816

  EVerest's ISO15118 update_energy_transfer_modes overflow can corrupt EVSE state

  EVerest · everest-core

  Medium5.5
• CVE-2026-27815

  EVerest: ISO15118 session_setup payment options overflow can corrupt EVSE state

  EVerest · everest-core

  Medium5.5
• CVE-2026-27814

  EVerest EvseManager phase-switch path has unsynchronized shared-state access race condition

  EVerest · everest-core

  Medium4.2
• CVE-2026-27813

  EVerest has use-after-free in auth timeout timer via race condition

  EVerest · everest-core

  Medium5.3
• CVE-2026-26074

  EVerest: OCPP201 startup event_queue lock mismatch leads to std::map/std::queue data race

  EVerest · everest-core

  High7.0