Threats Tagged 'cve-2026-24003'

CVE-2026-24003 is a medium-severity improper authentication vulnerability in the EVerest everest-core EV charging software stack versions up to 2025.12.1. The flaw allows an attacker to bypass sequence state verification and authentication checks via ISO 15118-2 messages published to the MQTT server, enabling transitions to forbidden states and illegitimate context updates. Although the internal state machine prevents leaving the WaitingForAuthentication state without proper authentication, crafted messages can trick the system into preparing to charge and send current. However, the final step of closing contactors to actually deliver current appears not possible without proper state transition. No patches are available at the time of publication, and no known exploits exist in the wild. The vulnerability impacts the integrity of the charging process but does not affect confidentiality or availability. European organizations operating EV charging infrastructure using EVerest software are at risk, especially in countries with high EV adoption and infrastructure deployment. Mitigation involves strict network segmentation, monitoring MQTT traffic for anomalous ISO 15118-2 messages, and applying vendor updates once available.

MediumVulnerabilityGermanyFranceNetherlands+5#cve#cve-2026-24003#cwe-287