Which versions of Everest are affected by EUVD-2026-16226?

Organizations using EVerest should be aware of moderate risk from CVE-2026-27816, a out-of-bounds write vulnerability rated CVSS 5.5.. A patch is available.

How to fix or mitigate EUVD-2026-16226?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Everest EUVD-2026-16226

Q: What is the CVSS score of EUVD-2026-16226?

EUVD-2026-16226 has a CVSS 4.0 base score of 5.5 (Medium). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-27816 MEDIUM

Out-of-bounds Write (CWE-787)

2026-03-26 GitHub_M

Buffer Overflow Memory Corruption Everest Everest Core

5.5

CVSS 4.0 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

5.5 MEDIUM

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Patch available

Apr 16, 2026 - 05:29 EUVD

2026.02.0

EUVD ID Assigned

Mar 26, 2026 - 16:45 euvd

EUVD-2026-16226

Analysis Generated

Mar 26, 2026 - 16:45 vuln.today

CVE Published

Mar 26, 2026 - 16:32 nvd

MEDIUM 5.5

DescriptionGitHub Advisory

EVerest is an EV charging software stack. Prior to versions to 2026.02.0, ISO15118_chargerImpl::handle_update_energy_transfer_modes copies a variable-length list into a fixed-size array of length 6 without bounds checking. With schema validation disabled by default, oversized MQTT Cmd payloads can trigger out-of-bounds writes and corrupt adjacent EVSE state or crash the process. Version 2026.02.0 contains a patch.

AnalysisAI

EVerest-Core prior to version 2026.02.0 contains an out-of-bounds write vulnerability in the ISO15118_chargerImpl::handle_update_energy_transfer_modes function, where variable-length MQTT command payloads are copied into a fixed-size 6-element array without bounds checking. When schema validation is disabled by default, oversized payloads trigger memory corruption that can crash the EV charging service or corrupt adjacent EVSE (Electric Vehicle Supply Equipment) state, affecting the integrity and availability of EV charging infrastructure. No public exploit code has been identified at the time of analysis, but the vulnerability is patched in version 2026.02.0.

Technical ContextAI

EVerest-Core (cpe:2.3:a:everest:everest-core) is an open-source EV charging software stack that implements ISO 15118 vehicle-to-grid communication protocols. The vulnerable code exists in the handle_update_energy_transfer_modes function within ISO15118_chargerImpl, which processes MQTT command payloads used for charging mode control. The root cause is CWE-787 (Out-of-bounds Write), a classic buffer overflow where a variable-length input list is copied into a statically-allocated array of exactly 6 elements without prior validation of input size. The default configuration disables schema validation on MQTT Cmd payloads, allowing oversized messages to reach the vulnerable code path unchecked. This is particularly critical in automotive charging contexts where EVSE state corruption could impact grid stability or vehicle safety systems.

RemediationAI

Upgrade EVerest-Core to version 2026.02.0 or later, which contains the patch for the out-of-bounds write vulnerability. Until patching is completed, enable MQTT schema validation in the charger configuration to enforce payload size limits on Cmd messages sent to handle_update_energy_transfer_modes, and restrict MQTT broker access to trusted networks or authenticated clients only. Network segmentation of the MQTT broker from untrusted network segments is strongly recommended. Organizations managing EV charging infrastructure should consult the patch advisory at https://github.com/EVerest/EVerest/security/advisories/GHSA-gq54-j8f4-xj8c for deployment guidance specific to their architecture.