# everest-core. Every CVE that names everest-core among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [EVerest has RemoteStop Bypass via BCB Toggle Session Restart](https://agentprime.io/advisories/CVE-2026-33015.md) `CVE-2026-33015` · CVE record: EVerest everest-core · CVSS 5.2 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: Broken access control - [EVerest has Delayed Authorization Response Bypasses Termination After RemoteStop](https://agentprime.io/advisories/CVE-2026-33014.md) `CVE-2026-33014` · CVE record: EVerest everest-core · CVSS 5.2 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: Broken access control - [EVerest: MQTT Switch-Phases Command Data Race Causing Charger State Corruptio](https://agentprime.io/advisories/CVE-2026-33009.md) `CVE-2026-33009` · CVE record: EVerest everest-core · CVSS 8.2 High · Not analysed yet · Published 26 Mar 2026 · Tags: Race condition - [EVerest: Charging Continues When WithdrawAuthorization Is Processed Before TransactionStarted](https://agentprime.io/advisories/CVE-2026-29044.md) `CVE-2026-29044` · CVE record: EVerest everest-core · CVSS 5.0 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: Broken access control - [EVerest: ISO15118 session_setup use-after-free can crash EVSE process](https://agentprime.io/advisories/CVE-2026-27828.md) `CVE-2026-27828` · CVE record: EVerest everest-core · CVSS 5.5 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: Memory corruption - [EVerest's ISO15118 update_energy_transfer_modes overflow can corrupt EVSE state](https://agentprime.io/advisories/CVE-2026-27816.md) `CVE-2026-27816` · CVE record: EVerest everest-core · CVSS 5.5 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: Memory corruption - [EVerest: ISO15118 session_setup payment options overflow can corrupt EVSE state](https://agentprime.io/advisories/CVE-2026-27815.md) `CVE-2026-27815` · CVE record: EVerest everest-core · CVSS 5.5 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: Memory corruption - [EVerest EvseManager phase-switch path has unsynchronized shared-state access race condition](https://agentprime.io/advisories/CVE-2026-27814.md) `CVE-2026-27814` · CVE record: EVerest everest-core · CVSS 4.2 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: Race condition - [EVerest has use-after-free in auth timeout timer via race condition](https://agentprime.io/advisories/CVE-2026-27813.md) `CVE-2026-27813` · CVE record: EVerest everest-core · CVSS 5.3 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: Memory corruption - [EVerest: OCPP201 startup event_queue lock mismatch leads to std::map/std::queue data race](https://agentprime.io/advisories/CVE-2026-26074.md) `CVE-2026-26074` · CVE record: EVerest everest-core · CVSS 7.0 High · Not analysed yet · Published 26 Mar 2026 · Tags: Race condition - [EVerest: OCPP 1.6 heap corruption caused by lock-free insertion in event_queue](https://agentprime.io/advisories/CVE-2026-26073.md) `CVE-2026-26073` · CVE record: EVerest everest-core · CVSS 5.9 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: Memory corruption - [EVerest has race-condition-induced std::map corruption in OCPP 1.6 evse_soc_map](https://agentprime.io/advisories/CVE-2026-26072.md) `CVE-2026-26072` · CVE record: EVerest everest-core · CVSS 4.2 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: Race condition - [EVerest: OCPP 2.0.1 EVCCID Data Race Leads to Heap Use‑After‑Free](https://agentprime.io/advisories/CVE-2026-26071.md) `CVE-2026-26071` · CVE record: EVerest everest-core · CVSS 4.2 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: Race condition, Memory corruption - [EVerest: OCPP 2.0.1 EV SoC Update Race Causes Charge Point Crash](https://agentprime.io/advisories/CVE-2026-26070.md) `CVE-2026-26070` · CVE record: EVerest everest-core · CVSS 4.6 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: Race condition - [EVerest has OOB via EVSE ID Indexing Mismatch in OCPP 2.0.1 UpdateAllowedEnergyTransferModes](https://agentprime.io/advisories/CVE-2026-26008.md) `CVE-2026-26008` · CVE record: EVerest everest-core · CVSS 7.5 High · Not analysed yet · Published 26 Mar 2026 · Tags: Memory corruption - [EVerest has stack buffer overflow in ifreq.ifr_name when interface name exceeds IFNAMSIZ](https://agentprime.io/advisories/CVE-2026-23995.md) `CVE-2026-23995` · CVE record: EVerest everest-core · CVSS 8.4 High · Not analysed yet · Published 26 Mar 2026 · Tags: Memory corruption - [EVerest's unchecked SLAC payload length causes stack overflow in HomeplugMessage::setup_payload](https://agentprime.io/advisories/CVE-2026-22790.md) `CVE-2026-22790` · CVE record: EVerest everest-core · CVSS 8.8 High · Not analysed yet · Published 26 Mar 2026 · Tags: Memory corruption - [EVerest has off-by-one stack buffer overflow in IsoMux certificate filename parsing](https://agentprime.io/advisories/CVE-2026-22593.md) `CVE-2026-22593` · CVE record: EVerest everest-core · CVSS 8.4 High · Not analysed yet · Published 26 Mar 2026 · Tags: CWE-193 - [EvseV2G has sequence state validation bypass](https://agentprime.io/advisories/CVE-2026-24003.md) `CVE-2026-24003` · CVE record: EVerest everest-core · CVSS 4.3 Medium · Not analysed yet · Published 26 Jan 2026 · Tags: Authentication bypass, Broken access control - [EVerest vulnerable to null pointer dereference during DC_ChargeLoopRes document deserialization](https://agentprime.io/advisories/CVE-2025-68141.md) `CVE-2025-68141` · CVE record: EVerest everest-core · CVSS 7.4 High · Not analysed yet · Published 21 Jan 2026 · Tags: Memory corruption - [EVerest allows null session ID to bypass session ID verification](https://agentprime.io/advisories/CVE-2025-68140.md) `CVE-2025-68140` · CVE record: EVerest everest-core · CVSS 4.3 Medium · Not analysed yet · Published 21 Jan 2026 · Tags: Broken access control - [In EVerest, by default, the EV is responsible for closing the connection if the module encounters an error during request processing](https://agentprime.io/advisories/CVE-2025-68139.md) `CVE-2025-68139` · CVE record: EVerest everest-core · CVSS 4.3 Medium · Not analysed yet · Published 21 Jan 2026 · Tags: Authentication bypass - [EVerest affected by memory exhaustion in libocpp](https://agentprime.io/advisories/CVE-2025-68138.md) `CVE-2025-68138` · CVE record: EVerest everest-core · CVSS 4.7 Medium · Not analysed yet · Published 21 Jan 2026 · Tags: Denial of service - [EVerest vulnerable to concatenation of strings literal and integers](https://agentprime.io/advisories/CVE-2026-23955.md) `CVE-2026-23955` · CVE record: EVerest everest-core · CVSS 4.2 Medium · Not analysed yet · Published 21 Jan 2026 · Tags: CWE-1046 - [EVerest's Integer Overflow and Signed to Unsigned conversion lead to either stack buffer overflow or infinite loop](https://agentprime.io/advisories/CVE-2025-68137.md) `CVE-2025-68137` · CVE record: EVerest everest-core · CVSS 8.4 High · Not analysed yet · Published 21 Jan 2026 · Tags: Memory corruption, Denial of service - [EVerest's inadequate session handling can lead to memory-related errors or exhaustion of the operating system’s file descriptors, resulting in a denial of service](https://agentprime.io/advisories/CVE-2025-68136.md) `CVE-2025-68136` · CVE record: EVerest everest-core · CVSS 7.4 High · Not analysed yet · Published 21 Jan 2026 · Tags: Denial of service - [EVerest's inadequate exception handling leads to denial of service](https://agentprime.io/advisories/CVE-2025-68135.md) `CVE-2025-68135` · CVE record: EVerest everest-core · CVSS 6.5 Medium · Not analysed yet · Published 21 Jan 2026 · Tags: CWE-703 - [EVerest's use of assert functions can potentially lead to denial of service](https://agentprime.io/advisories/CVE-2025-68134.md) `CVE-2025-68134` · CVE record: EVerest everest-core · CVSS 7.4 High · Not analysed yet · Published 21 Jan 2026 · Tags: CWE-20 - [EVerest has out-of-bounds read in DZG_GSH01 SLIP CRC parser that can crash powermeter driver](https://agentprime.io/advisories/CVE-2025-68132.md) `CVE-2025-68132` · CVE record: EVerest everest-core · CVSS 2.4 Low · Not analysed yet · Published 21 Jan 2026 · Tags: Memory corruption - [EVerest's unlimited connections can lead to DoS through operating system resource exhaustion](https://agentprime.io/advisories/CVE-2025-68133.md) `CVE-2025-68133` · CVE record: EVerest everest-core · CVSS 7.4 High · Not analysed yet · Published 21 Jan 2026 · Tags: Denial of service - [EVerest has an integer overflow in the "v2g_incoming_v2gtp" function](https://agentprime.io/advisories/CVE-2024-37310.md) `CVE-2024-37310` · CVE record: EVerest everest-core · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Jul 2024 · Tags: Memory corruption ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .