EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to `std::string` concurrent access.with heap-use-after-free possible. This is triggered by EVCCID update (EV/ISO15118) and OCPP session/authorization events. Version 2026.02.0 contains a patch.
EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to `std::map<std::optional>` concurrent access (container/optional corruption possible). The trigger is an EV SoC update with powermeter periodic update and unplugging/SessionFinished state. Version 2026.2.0 contains a patch.
EVerest is an EV charging software stack. Versions prior to 2026.02.0 have an out-of-bounds access (std::vector) that leads to possible remote crash/memory corruption. This is because the CSMS sends UpdateAllowedEnergyTransferModes over the network. Version 2026.2.0 contains a patch.
EVerest is an EV charging software stack. Prior to version 2026.02.0, stack-based buffer overflow in CAN interface initialization: passing an interface name longer than IFNAMSIZ (16) to CAN open routines overflows `ifreq.ifr_name`, corrupting adjacent stack data and enabling potential code execution. A malicious or misconfigured interface name can trigger this before any privilege checks. Version 2026.02.0 contains a patch.
EVerest is an EV charging software stack. Prior to version 2026.02.0, `HomeplugMessage::setup_payload` trusts `len` after an `assert`; in release builds the check is removed, so oversized SLAC payloads are `memcpy`'d into a ~1497-byte stack buffer, corrupting the stack and enabling remote code execution from network-provided frames. Version 2026.02.0 contains a patch.
CVE-2026-22593 is a high-severity vulnerability in the EVerest everest-core EV charging software stack. It is caused by an off-by-one error in the IsoMux certificate filename handling prior to version 2026.02.0. When a filename length equals the maximum allowed length (100), a stack-based buffer overflow occurs, potentially allowing corruption of stack state and code execution. This vulnerability is patched in version 2026.02.0.
Incorrect Privilege Assignment vulnerability in wpeverest User Registration user-registration allows Privilege Escalation.This issue affects User Registration: from n/a through <= 4.4.9.
The User Registration & Membership plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Content Access Rules REST API endpoints in versions 5.0.1 through 5.1.4. This is due to the `check_permissions()` method only checking for `edit_posts` capability instead of an administrator-level capability. This makes it possible for authenticated attackers, with Contributor-level access and above, to list, create, modify, toggle, duplicate, and delete site-wide content restriction rules, potentially exposing restricted content or denying legitimate user access.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPEverest Everest Forms Pro allows Stored XSS.This issue affects Everest Forms Pro: from n/a through 1.9.10.
The User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to improper privilege management in all versions up to, and including, 5.1.2. This is due to the plugin accepting a user-supplied role during membership registration without properly enforcing a server-side allowlist. This makes it possible for unauthenticated attackers to create administrator accounts by supplying a role value during membership registration.
The User Registration & Membership plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.1.2. This is due to incorrect authentication in the 'register_member' function. This makes it possible for unauthenticated attackers to log in a newly registered user on the site who has the 'urm_user_just_created' user meta set.
The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.2 via the 'register_member' function, due to missing validation on the 'member_id' user controlled key. This makes it possible for unauthenticated attackers to delete arbitrary user accounts that newly registered on the site who has the 'urm_user_just_created' user meta set.
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in wpeverest Everest Forms everest-forms allows Code Injection.This issue affects Everest Forms: from n/a through <= 3.4.1.
CVE-2026-24003 is a medium-severity improper authentication vulnerability in the EVerest everest-core EV charging software stack versions up to 2025.12.1. The flaw allows an attacker to bypass sequence state verification and authentication checks via ISO 15118-2 messages published to the MQTT server, enabling transitions to forbidden states and illegitimate context updates. Although the internal state machine prevents leaving the WaitingForAuthentication state without proper authentication, crafted messages can trick the system into preparing to charge and send current. However, the final step of closing contactors to actually deliver current appears not possible without proper state transition. No patches are available at the time of publication, and no known exploits exist in the wild. The vulnerability impacts the integrity of the charging process but does not affect confidentiality or availability. European organizations operating EV charging infrastructure using EVerest software are at risk, especially in countries with high EV adoption and infrastructure deployment. Mitigation involves strict network segmentation, monitoring MQTT traffic for anomalous ISO 15118-2 messages, and applying vendor updates once available.
Missing Authorization vulnerability in wpeverest User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through <= 4.4.9.
Missing Authorization vulnerability in wpeverest User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through <= 4.4.6.
CVE-2025-68141 is a high-severity vulnerability in the EVerest everest-core EV charging software stack prior to version 2025.10.0. It involves a NULL pointer dereference triggered during deserialization of a DC_ChargeLoopRes message containing Receipt and TaxCosts data. Specifically, an out-of-bounds access occurs in the convert function handling DetailedTaxType, causing the module and all EVerest processes to terminate, resulting in denial of service for EV charging stations. Exploitation requires network access but no authentication or user interaction. The vulnerability impacts availability but not confidentiality or integrity. The issue is fixed in version 2025.10.0.
CVE-2025-68140 is a medium severity authorization vulnerability in the EVerest everest-core EV charging software stack versions prior to 2025.9.0. The flaw arises because when no session is registered, the default session ID is zero, allowing an attacker to submit messages with session ID 0 and bypass authorization checks. This enables unauthorized and anonymous indirect emission of MQTT messages and interaction with V2G message handlers, potentially updating session contexts without proper permissions. The vulnerability does not impact confidentiality or availability but can affect the integrity of session management. Exploitation requires network access but no authentication or user interaction. The issue is fixed in version 2025.9.0.
CVE-2025-68139 is a session fixation vulnerability in the EVerest everest-core EV charging software stack affecting versions up to 2025.12.1. The default configuration does not terminate sessions or connections upon failed responses, allowing attackers to potentially exploit session management weaknesses. Although changing the setting to terminate connections on failure mitigates the issue, it is not enabled by default due to risks of causing ECU resets and vehicle charging unavailability. The vulnerability has a medium severity with a CVSS score of 4.3, indicating limited impact on confidentiality and integrity without affecting availability. No known exploits are reported in the wild. European EV charging infrastructure operators using EVerest software should carefully evaluate the trade-offs between security and operational stability. Mitigation involves enabling the terminate_connection_on_failed_response setting while preparing for possible vehicle ECU disruptions.
CVE-2025-68138 is a medium severity vulnerability in the EVerest libocpp library, a C++ implementation of the Open Charge Point Protocol used in EV charging software. The flaw involves a memory leak caused by failure to free memory allocated by strdup calls during connection attempts. This can lead to memory exhaustion and denial of service on affected systems running libocpp versions prior to 0.30.1. Exploitation requires network access but no authentication or user interaction. The vulnerability impacts availability but not confidentiality or integrity. No known exploits are reported in the wild yet. The issue is fixed in libocpp version 0.30.