CVE-2026-27828

N/A

Beschreibung

EVerest is an EV charging software stack. Prior to version 2026.02.0, ISO15118_chargerImpl::handle_session_setup uses v2g_ctx after it has been freed when ISO15118 initialization fails (e.g., no IPv6 link-local address). The EVSE process can be crashed remotely by an attacker with MQTT access who issues a session_setup command while v2g_ctx has been released. Version 2026.02.0 contains a patch.

CVE Details

CVSS v3.1 BewertungN/A

Veroffentlicht3/26/2026

Zuletzt geandert3/26/2026

Quellenvd

Honeypot-Sichtungen0

Schwachen (CWE)

CWE-416

Referenzen

https://github.com/EVerest/EVerest/security/advisories/GHSA-5g3v-qc79-qqwr(security-advisories@github.com)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.