Everest — CraftedSignal Threat Feed

EVerest CAN Interface Stack Buffer Overflow Vulnerability (CVE-2026-23995)

hello@craftedsignal.io — Fri, 27 Mar 2026 12:00:00 +0000

EVerest is an open-source software stack for electric vehicle (EV) charging infrastructure. A stack-based buffer overflow vulnerability, tracked as CVE-2026-23995, affects versions prior to 2026.02.0. The vulnerability stems from improper handling of CAN (Controller Area Network) interface names during initialization. Specifically, when an interface name exceeding IFNAMSIZ (16 bytes) is supplied to CAN open routines, the ifreq.ifr_name buffer overflows, potentially corrupting adjacent stack…

EVerest EV Charging Stack Data Race Vulnerability (CVE-2026-26074)

hello@craftedsignal.io — Thu, 26 Mar 2026 17:16:33 +0000

EVerest, an EV charging software stack, is susceptible to a data race vulnerability identified as CVE-2026-26074. This flaw affects versions prior to 2026.02.0. The vulnerability arises from concurrent access to the event_queue, specifically a std::map, when a CSMS (Charging Station Management System) GetLog or UpdateFirmware request (originating from the network) coincides with an EVSE (Electric Vehicle Supply Equipment) fault event (a physical occurrence). This combination of…

EVerest EV Charging Stack Remote Code Execution via Stack Buffer Overflow (CVE-2026-22790)

hello@craftedsignal.io — Thu, 26 Mar 2026 15:16:31 +0000

EVerest is an open-source software stack designed for managing EV charging infrastructure. Prior to version 2026.02.0, a critical vulnerability exists within the HomeplugMessage::setup_payload function. Specifically, the code trusts the len parameter after an assert statement during the processing of SLAC (Signal Level Attenuation Characterization) payloads. In release builds, the assert check is removed, which allows an attacker to send network frames with oversized SLAC payloads. This…