Vulnerability Details CVE-2026-26008
EVerest is an EV charging software stack. Versions prior to 2026.02.0 have an out-of-bounds access (std::vector) that leads to possible remote crash/memory corruption. This is because the CSMS sends UpdateAllowedEnergyTransferModes over the network. Version 2026.2.0 contains a patch.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 12.1%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2026-26008
-
cpe:2.3:o:linuxfoundation:everest:2022.11.0
-
cpe:2.3:o:linuxfoundation:everest:2022.12.0
-
cpe:2.3:o:linuxfoundation:everest:2022.12.1
-
cpe:2.3:o:linuxfoundation:everest:2023.1.0
-
cpe:2.3:o:linuxfoundation:everest:2023.10.0
-
cpe:2.3:o:linuxfoundation:everest:2023.12.0
-
cpe:2.3:o:linuxfoundation:everest:2023.2.0
-
cpe:2.3:o:linuxfoundation:everest:2023.2.1
-
cpe:2.3:o:linuxfoundation:everest:2023.3.0
-
cpe:2.3:o:linuxfoundation:everest:2023.5.0
-
cpe:2.3:o:linuxfoundation:everest:2023.6.0
-
cpe:2.3:o:linuxfoundation:everest:2023.7.0
-
cpe:2.3:o:linuxfoundation:everest:2023.8.0
-
cpe:2.3:o:linuxfoundation:everest:2023.9.0
-
cpe:2.3:o:linuxfoundation:everest:2023.9.1
-
cpe:2.3:o:linuxfoundation:everest:2024.1.0
-
cpe:2.3:o:linuxfoundation:everest:2024.10.0
-
cpe:2.3:o:linuxfoundation:everest:2024.11.0
-
cpe:2.3:o:linuxfoundation:everest:2024.2.0
-
cpe:2.3:o:linuxfoundation:everest:2024.3.0
-
cpe:2.3:o:linuxfoundation:everest:2024.3.1
-
cpe:2.3:o:linuxfoundation:everest:2024.4.0
-
cpe:2.3:o:linuxfoundation:everest:2024.5.0
-
cpe:2.3:o:linuxfoundation:everest:2024.6.0
-
cpe:2.3:o:linuxfoundation:everest:2024.7.0
-
cpe:2.3:o:linuxfoundation:everest:2024.7.1
-
cpe:2.3:o:linuxfoundation:everest:2024.8.0
-
cpe:2.3:o:linuxfoundation:everest:2024.9.0
-
cpe:2.3:o:linuxfoundation:everest:2024.9.1
-
cpe:2.3:o:linuxfoundation:everest:2024.9.2
-
cpe:2.3:o:linuxfoundation:everest:2025.1.0
-
cpe:2.3:o:linuxfoundation:everest:2025.10.0
-
cpe:2.3:o:linuxfoundation:everest:2025.12.0
-
cpe:2.3:o:linuxfoundation:everest:2025.12.1
-
cpe:2.3:o:linuxfoundation:everest:2025.2.0
-
cpe:2.3:o:linuxfoundation:everest:2025.3.0
-
cpe:2.3:o:linuxfoundation:everest:2025.4.0
-
cpe:2.3:o:linuxfoundation:everest:2025.4.1
-
cpe:2.3:o:linuxfoundation:everest:2025.5.0
-
cpe:2.3:o:linuxfoundation:everest:2025.6.0
-
cpe:2.3:o:linuxfoundation:everest:2025.7.0
-
cpe:2.3:o:linuxfoundation:everest:2025.8.0
-
cpe:2.3:o:linuxfoundation:everest:2025.9.0