https://feed.craftedsignal.io/tags/cve-2026-26074/Trending threats, MITRE ATT&CK coverage, and detection metadata — refreshed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 26 Mar 2026 17:16:33 +0000https://feed.craftedsignal.io/briefs/2026-03-everest-data-race/Thu, 26 Mar 2026 17:16:33 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-03-everest-data-race/EVerest versions prior to 2026.02.0 exhibit a data race vulnerability (CVE-2026-26074) where concurrent network requests and physical events can corrupt the event queue, leading to potential denial of service or other undefined behavior.EVerest, an EV charging software stack, is susceptible to a data race vulnerability identified as CVE-2026-26074. This flaw affects versions prior to 2026.02.0. The vulnerability arises from concurrent access to the event_queue, specifically a std::map<std::queue>, when a CSMS (Charging Station Management System) GetLog or UpdateFirmware request (originating from the network) coincides with an EVSE (Electric Vehicle Supply Equipment) fault event (a physical occurrence). This combination of…

]]>mediumadvisorycve-2026-26074data-raceev-chargingeverest