PT-2026-28360 · Everest · Everest

Published 2026-03-26 · Updated 2026-03-27 · CVE-2026-27815

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions EVerest versions prior to 2026.02.0

Description EVerest is an EV charging software stack. Before version 2026.02.0, the ISO15118 chargerImpl::handle session setup function copies a variable-length payment options list into a fixed-size array of length 2 without bounds checking. With schema validation disabled by default, oversized MQTT Cmd payloads can trigger out-of-bounds writes, potentially corrupting adjacent EVSE state or causing the process to crash. The function handle session setup is vulnerable. The vulnerable parameter is payment options.

Recommendations Update to version 2026.02.0 or later.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-27815

GHSA-7WMG-CRC8-6XXF

Affected Products

Everest

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27815.json · Exploit
• https://github.com/EVerest/EVerest/security/advisories/GHSA-7wmg-crc8-6xxf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-27815 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-27815 · Security Note
• https://twitter.com/CVEnew/status/2037513438922932514 · Twitter Post
• https://twitter.com/infoflowcloud/status/2037515569507746002 · Twitter Post