PT-2026-28352 · Everest · Everest

Finder16 · Publicado 2026-03-26 · Atualizado 2026-03-26 · CVE-2026-26074

Positive Technologies (AI Summary)

CVSS v3.1

7.0

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions EVerest versions prior to 2026.02.0

Description EVerest is an EV charging software stack susceptible to a data race that could lead to corruption of std::map<std::queue>. The issue is triggered by a CSMS GetLog/UpdateFirmware request (network) coinciding with an EVSE fault event (physical). This results in concurrent access (data race) to the event queue, as reported by TSAN.

Recommendations Update to version 2026.02.0 or later.

Exploit

Correção

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

CVE-2026-26074

GHSA-P3HG-VQGV-H524

Produtos afetados

Everest

Referências · 4

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/26xxx/CVE-2026-26074.json · Exploit
• https://github.com/EVerest/EVerest/security/advisories/GHSA-p3hg-vqgv-h524 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2026-26074 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-26074 · Nota de Segurança