PT-2026-28359 · Everest · Everest

Finder16 · Published 2026-03-26 · Updated 2026-03-27 · CVE-2026-27814

Positive Technologies (AI Summary)

CVSS v3.1

4.2

Medium

Base vector

AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions EVerest versions prior to 2026.02.0

Description EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race (C++ undefined behavior) triggered by a 1-phase ↔ 3-phase switch request (ac switch three phases while charging) during charging or waiting, which executes concurrently with the state machine loop.

Recommendations Update to version 2026.02.0 or later.

Exploit

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2026-27814

GHSA-5528-WC53-V557

Affected Products

Everest

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27814.json · Exploit
• https://github.com/EVerest/EVerest/security/advisories/GHSA-5528-wc53-v557 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-27814 · Security Note
• https://osv.dev/vulnerability/CVE-2026-27814 · Vendor Advisory
• https://twitter.com/infoflowcloud/status/2037515619348718018 · Twitter Post
• https://twitter.com/CVEnew/status/2037513442039300213 · Twitter Post