Vulnerabilities in EVerest
33 resultsCVE-2026-23955MEDIUMEVerest vulnerable to concatenation of strings literal and integersEPSS 0.2%CVE-2025-59399LOWlibocpp before 0.28.0 allows a denial of service (EVerest crash) because a secondary exception is thrown during error message generation.EPSS 0.2%CVE-2025-68138MEDIUMEVerest affected by memory exhaustion in libocppEPSS 0.2%CVE-2025-68134HIGHEVerest's use of assert functions can potentially lead to denial of serviceEPSS 0.2%CVE-2025-68139MEDIUMIn EVerest, by default, the EV is responsible for closing the connection if the module encounters an error during request processingEPSS 0.1%CVE-2026-26074HIGHEVerest: OCPP201 startup event_queue lock mismatch leads to std::map/std::queue data raceEPSS 0.1%CVE-2026-22593HIGHEVerest has off-by-one stack buffer overflow in IsoMux certificate filename parsingEPSS 0.1%CVE-2026-26072MEDIUMEVerest has race-condition-induced std::map corruption in OCPP 1.6 evse_soc_mapEPSS 0.1%CVE-2025-68140MEDIUMEVerest allows null session ID to bypass session ID verificationEPSS 0.1%CVE-2026-27814MEDIUMEVerest EvseManager phase-switch path has unsynchronized shared-state access race conditionEPSS 0.1%CVE-2026-26071MEDIUMEVerest: OCPP 2.0.1 EVCCID Data Race Leads to Heap Use‑After‑FreeEPSS 0.1%CVE-2026-27813MEDIUMEVerest has use-after-free in auth timeout timer via race conditionEPSS 0.1%CVE-2026-26070MEDIUMEVerest: OCPP 2.0.1 EV SoC Update Race Causes Charge Point CrashEPSS 0.1%