Vulnerability Details CVE-2026-33015
EVerest is an EV charging software stack. Prior to version 2026.02.0, even immediately after CSMS performs a RemoteStop (StopTransaction), the EVSE can return to `PrepareCharging` via the EV's BCB toggle, allowing session restart. This breaks the irreversibility of remote stop and can bypass operational/billing/safety controls. Version 2026.02.0 contains a patch.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 3.8%
CVSS Severity
CVSS v3 Score 5.2
References
Products affected by CVE-2026-33015
-
cpe:2.3:o:linuxfoundation:everest:2022.11.0
-
cpe:2.3:o:linuxfoundation:everest:2022.12.0
-
cpe:2.3:o:linuxfoundation:everest:2022.12.1
-
cpe:2.3:o:linuxfoundation:everest:2023.1.0
-
cpe:2.3:o:linuxfoundation:everest:2023.10.0
-
cpe:2.3:o:linuxfoundation:everest:2023.12.0
-
cpe:2.3:o:linuxfoundation:everest:2023.2.0
-
cpe:2.3:o:linuxfoundation:everest:2023.2.1
-
cpe:2.3:o:linuxfoundation:everest:2023.3.0
-
cpe:2.3:o:linuxfoundation:everest:2023.5.0
-
cpe:2.3:o:linuxfoundation:everest:2023.6.0
-
cpe:2.3:o:linuxfoundation:everest:2023.7.0
-
cpe:2.3:o:linuxfoundation:everest:2023.8.0
-
cpe:2.3:o:linuxfoundation:everest:2023.9.0
-
cpe:2.3:o:linuxfoundation:everest:2023.9.1
-
cpe:2.3:o:linuxfoundation:everest:2024.1.0
-
cpe:2.3:o:linuxfoundation:everest:2024.10.0
-
cpe:2.3:o:linuxfoundation:everest:2024.11.0
-
cpe:2.3:o:linuxfoundation:everest:2024.2.0
-
cpe:2.3:o:linuxfoundation:everest:2024.3.0
-
cpe:2.3:o:linuxfoundation:everest:2024.3.1
-
cpe:2.3:o:linuxfoundation:everest:2024.4.0
-
cpe:2.3:o:linuxfoundation:everest:2024.5.0
-
cpe:2.3:o:linuxfoundation:everest:2024.6.0
-
cpe:2.3:o:linuxfoundation:everest:2024.7.0
-
cpe:2.3:o:linuxfoundation:everest:2024.7.1
-
cpe:2.3:o:linuxfoundation:everest:2024.8.0
-
cpe:2.3:o:linuxfoundation:everest:2024.9.0
-
cpe:2.3:o:linuxfoundation:everest:2024.9.1
-
cpe:2.3:o:linuxfoundation:everest:2024.9.2
-
cpe:2.3:o:linuxfoundation:everest:2025.1.0
-
cpe:2.3:o:linuxfoundation:everest:2025.10.0
-
cpe:2.3:o:linuxfoundation:everest:2025.12.0
-
cpe:2.3:o:linuxfoundation:everest:2025.12.1
-
cpe:2.3:o:linuxfoundation:everest:2025.2.0
-
cpe:2.3:o:linuxfoundation:everest:2025.3.0
-
cpe:2.3:o:linuxfoundation:everest:2025.4.0
-
cpe:2.3:o:linuxfoundation:everest:2025.4.1
-
cpe:2.3:o:linuxfoundation:everest:2025.5.0
-
cpe:2.3:o:linuxfoundation:everest:2025.6.0
-
cpe:2.3:o:linuxfoundation:everest:2025.7.0
-
cpe:2.3:o:linuxfoundation:everest:2025.8.0
-
cpe:2.3:o:linuxfoundation:everest:2025.9.0