PT-2026-3845 · Everest · Everest

Published 2026-01-21 · Updated 2026-01-21 · CVE-2025-68134

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions EVerest versions prior to 2025.10.0

Description The software may experience crashes due to the frequent use of the assert function for error handling. This can lead to a denial of service, as the manager terminates all modules and exits upon encountering a crash. In environments managing multiple EVSE, this can affect multiple users. The assert function is used to handle errors.

Recommendations Update to version 2025.10.0 or later.

Exploit

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2025-68134

GHSA-CXC5-RRJ5-8PF3

Affected Products

Everest

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68134.json · Exploit
• https://github.com/EVerest/everest-core/security/advisories/GHSA-cxc5-rrj5-8pf3 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-68134 · Security Note
• https://osv.dev/vulnerability/CVE-2025-68134 · Vendor Advisory
• https://t.me/CVEtracker/42686 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2014071909252571536 · Twitter Post