agentprime: everest-coreEvery new CVE for everest-core.https://agentprime.io/CVE-2026-33015: EVerest has RemoteStop Bypass via BCB Toggle Session Restarthttps://agentprime.io/advisories/CVE-2026-33015/https://agentprime.io/advisories/CVE-2026-33015/CVSS 5.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 16:42:50 GMTCVECVE-2026-33014: EVerest has Delayed Authorization Response Bypasses Termination After RemoteStophttps://agentprime.io/advisories/CVE-2026-33014/https://agentprime.io/advisories/CVE-2026-33014/CVSS 5.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 16:40:40 GMTCVECVE-2026-33009: EVerest: MQTT Switch-Phases Command Data Race Causing Charger State Corruptiohttps://agentprime.io/advisories/CVE-2026-33009/https://agentprime.io/advisories/CVE-2026-33009/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 16:39:30 GMTCVECVE-2026-29044: EVerest: Charging Continues When WithdrawAuthorization Is Processed Before TransactionStartedhttps://agentprime.io/advisories/CVE-2026-29044/https://agentprime.io/advisories/CVE-2026-29044/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 16:37:33 GMTCVECVE-2026-27828: EVerest: ISO15118 session_setup use-after-free can crash EVSE processhttps://agentprime.io/advisories/CVE-2026-27828/https://agentprime.io/advisories/CVE-2026-27828/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 16:34:23 GMTCVECVE-2026-27816: EVerest's ISO15118 update_energy_transfer_modes overflow can corrupt EVSE statehttps://agentprime.io/advisories/CVE-2026-27816/https://agentprime.io/advisories/CVE-2026-27816/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 16:32:05 GMTCVECVE-2026-27815: EVerest: ISO15118 session_setup payment options overflow can corrupt EVSE statehttps://agentprime.io/advisories/CVE-2026-27815/https://agentprime.io/advisories/CVE-2026-27815/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 16:30:29 GMTCVECVE-2026-27814: EVerest EvseManager phase-switch path has unsynchronized shared-state access race conditionhttps://agentprime.io/advisories/CVE-2026-27814/https://agentprime.io/advisories/CVE-2026-27814/CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 16:27:54 GMTCVECVE-2026-27813: EVerest has use-after-free in auth timeout timer via race conditionhttps://agentprime.io/advisories/CVE-2026-27813/https://agentprime.io/advisories/CVE-2026-27813/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 16:23:19 GMTCVECVE-2026-26074: EVerest: OCPP201 startup event_queue lock mismatch leads to std::map/std::queue data racehttps://agentprime.io/advisories/CVE-2026-26074/https://agentprime.io/advisories/CVE-2026-26074/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 16:19:45 GMTCVECVE-2026-26073: EVerest: OCPP 1.6 heap corruption caused by lock-free insertion in event_queuehttps://agentprime.io/advisories/CVE-2026-26073/https://agentprime.io/advisories/CVE-2026-26073/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 16:15:22 GMTCVECVE-2026-26072: EVerest has race-condition-induced std::map corruption in OCPP 1.6 evse_soc_maphttps://agentprime.io/advisories/CVE-2026-26072/https://agentprime.io/advisories/CVE-2026-26072/CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 14:50:15 GMTCVECVE-2026-26071: EVerest: OCPP 2.0.1 EVCCID Data Race Leads to Heap Use‑After‑Freehttps://agentprime.io/advisories/CVE-2026-26071/https://agentprime.io/advisories/CVE-2026-26071/CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 14:48:30 GMTCVECVE-2026-26070: EVerest: OCPP 2.0.1 EV SoC Update Race Causes Charge Point Crashhttps://agentprime.io/advisories/CVE-2026-26070/https://agentprime.io/advisories/CVE-2026-26070/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 14:45:36 GMTCVECVE-2026-26008: EVerest has OOB via EVSE ID Indexing Mismatch in OCPP 2.0.1 UpdateAllowedEnergyTransferModeshttps://agentprime.io/advisories/CVE-2026-26008/https://agentprime.io/advisories/CVE-2026-26008/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 14:43:41 GMTCVECVE-2026-23995: EVerest has stack buffer overflow in ifreq.ifr_name when interface name exceeds IFNAMSIZhttps://agentprime.io/advisories/CVE-2026-23995/https://agentprime.io/advisories/CVE-2026-23995/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 14:36:30 GMTCVECVE-2026-22790: EVerest's unchecked SLAC payload length causes stack overflow in HomeplugMessage::setup_payloadhttps://agentprime.io/advisories/CVE-2026-22790/https://agentprime.io/advisories/CVE-2026-22790/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 14:31:44 GMTCVECVE-2026-22593: EVerest has off-by-one stack buffer overflow in IsoMux certificate filename parsinghttps://agentprime.io/advisories/CVE-2026-22593/https://agentprime.io/advisories/CVE-2026-22593/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 13:49:26 GMTCVECVE-2026-24003: EvseV2G has sequence state validation bypasshttps://agentprime.io/advisories/CVE-2026-24003/https://agentprime.io/advisories/CVE-2026-24003/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Jan 2026 22:12:47 GMTCVECVE-2025-68141: EVerest vulnerable to null pointer dereference during DC_ChargeLoopRes document deserializationhttps://agentprime.io/advisories/CVE-2025-68141/https://agentprime.io/advisories/CVE-2025-68141/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Jan 2026 19:56:14 GMTCVECVE-2025-68140: EVerest allows null session ID to bypass session ID verificationhttps://agentprime.io/advisories/CVE-2025-68140/https://agentprime.io/advisories/CVE-2025-68140/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Jan 2026 19:54:51 GMTCVECVE-2025-68139: In EVerest, by default, the EV is responsible for closing the connection if the module encounters an error during request processinghttps://agentprime.io/advisories/CVE-2025-68139/https://agentprime.io/advisories/CVE-2025-68139/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Jan 2026 19:36:36 GMTCVECVE-2025-68138: EVerest affected by memory exhaustion in libocpphttps://agentprime.io/advisories/CVE-2025-68138/https://agentprime.io/advisories/CVE-2025-68138/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Jan 2026 19:30:49 GMTCVECVE-2026-23955: EVerest vulnerable to concatenation of strings literal and integershttps://agentprime.io/advisories/CVE-2026-23955/https://agentprime.io/advisories/CVE-2026-23955/CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Jan 2026 19:25:12 GMTCVECVE-2025-68137: EVerest's Integer Overflow and Signed to Unsigned conversion lead to either stack buffer overflow or infinite loophttps://agentprime.io/advisories/CVE-2025-68137/https://agentprime.io/advisories/CVE-2025-68137/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Jan 2026 19:20:09 GMTCVECVE-2025-68136: EVerest's inadequate session handling can lead to memory-related errors or exhaustion of the operating system’s file descriptors, resulting in a denial of servicehttps://agentprime.io/advisories/CVE-2025-68136/https://agentprime.io/advisories/CVE-2025-68136/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Jan 2026 19:18:21 GMTCVECVE-2025-68135: EVerest's inadequate exception handling leads to denial of servicehttps://agentprime.io/advisories/CVE-2025-68135/https://agentprime.io/advisories/CVE-2025-68135/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Jan 2026 18:56:05 GMTCVECVE-2025-68134: EVerest's use of assert functions can potentially lead to denial of servicehttps://agentprime.io/advisories/CVE-2025-68134/https://agentprime.io/advisories/CVE-2025-68134/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Jan 2026 18:32:13 GMTCVECVE-2025-68132: EVerest has out-of-bounds read in DZG_GSH01 SLIP CRC parser that can crash powermeter driverhttps://agentprime.io/advisories/CVE-2025-68132/https://agentprime.io/advisories/CVE-2025-68132/CVSS 2.4 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Jan 2026 18:28:40 GMTCVECVE-2025-68133: EVerest's unlimited connections can lead to DoS through operating system resource exhaustionhttps://agentprime.io/advisories/CVE-2025-68133/https://agentprime.io/advisories/CVE-2025-68133/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Jan 2026 02:25:03 GMTCVECVE-2024-37310: EVerest has an integer overflow in the "v2g_incoming_v2gtp" functionhttps://agentprime.io/advisories/CVE-2024-37310/https://agentprime.io/advisories/CVE-2024-37310/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Jul 2024 19:39:36 GMTCVEcritical