PT-2026-28344 · Everest · Everest

Finder16 · Publicado 2026-03-26 · Atualizado 2026-03-29 · CVE-2026-26008

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions EVerest versions prior to 2026.02.0

Description EVerest is an EV charging software stack. Versions prior to 2026.02.0 have an out-of-bounds access issue involving a std::vector, potentially leading to remote crash or memory corruption. This occurs because the CSMS sends UpdateAllowedEnergyTransferModes over the network.

Recommendations Update to version 2026.02.0 or later.

Exploit

Correção

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2026-26008

GHSA-VW95-6JJ7-3FV9

Produtos afetados

Everest

Referências · 5

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/26xxx/CVE-2026-26008.json · Exploit
• https://github.com/EVerest/EVerest/security/advisories/GHSA-vw95-6jj7-3fv9 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-26008 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-26008 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2038135181442506755 · Publicação no Twitter