Vulnerabilities ›

CVE-2026-27828

High

EVerest is an EV charging software stack. Prior to version 2026.02.0, ISO15118_chargerImpl::handle_session_setup uses v2g_ctx after it has been freed when ISO15118 initialization fails (e.g., no IPv6

CWE-416 — Weakness Type

                    Published: Mar 26, 2026                      ·  Modified: Apr 2, 2026                      ·  Source: NVD                

CVSS v3

7.5

🔗 NVD Official

📄 Description (English)

EVerest is an EV charging software stack. Prior to version 2026.02.0, ISO15118_chargerImpl::handle_session_setup uses v2g_ctx after it has been freed when ISO15118 initialization fails (e.g., no IPv6 link-local address). The EVSE process can be crashed remotely by an attacker with MQTT access who issues a session_setup command while v2g_ctx has been released. Version 2026.02.0 contains a patch.

🤖 AI Executive Summary

EVerest EV charging software contains a use-after-free vulnerability in ISO15118_chargerImpl::handle_session_setup that allows remote crash when ISO15118 initialization fails. An attacker with MQTT access can trigger the vulnerability by issuing a session_setup command after v2g_ctx has been freed.

📄 Description (Arabic)

ثغرة استخدام الذاكرة المحررة في EVerest تحدث عندما يفشل تهيئة ISO15118 (مثل عدم وجود عنوان IPv6 محلي للرابط) ولا يتم تنظيف مؤشر v2g_ctx بشكل صحيح. يمكن لمهاجم مع وصول MQTT إرسال أمر session_setup لتشغيل الثغرة وتعطيل عملية EVSE.

🤖 ملخص تنفيذي (AI)

برنامج EVerest لشحن المركبات الكهربائية يحتوي على ثغرة استخدام الذاكرة المحررة في ISO15118_chargerImpl::handle_session_setup تسمح بتعطيل العملية عن بعد عند فشل التهيئة. يمكن لمهاجم لديه وصول MQTT تشغيل الثغرة بإصدار أمر session_setup بعد تحرير v2g_ctx.

🤖 AI Intelligence Analysis Analyzed: May 3, 2026 06:37

🇸🇦 Saudi Arabia Impact Assessment

Saudi Relevance: high

🏢 Affected Saudi Sectors

energy telecom government

🎯 MITRE ATT&CK Techniques

T1499.004 T1561.002 T1021.001

⚖️ Saudi Risk Score (AI)

7.0

/ 10.0

🔧 Remediation Steps (English)

Upgrade EVerest to version 2026.02.0 or later immediately. Implement network segmentation to restrict MQTT access to authorized charging infrastructure only. Monitor MQTT traffic for unauthorized session_setup commands. Implement authentication and authorization controls on MQTT broker.

🔧 خطوات المعالجة (العربية)

قم بترقية EVerest إلى الإصدار 2026.02.0 أو أحدث فوراً. طبق تقسيم الشبكة لتقييد وصول MQTT للبنية التحتية المصرح بها فقط. راقب حركة MQTT للأوامر غير المصرح بها. طبق عناصر التحكم في المصادقة والتفويض على وسيط MQTT.

📋 Regulatory Compliance Mapping

🟢 NCA ECC 2024

5.1 5.2 5.3 6.1

🔵 SAMA CSF

ID.BE-1 PR.AC-1 PR.PT-1 DE.CM-1

🟡 ISO 27001:2022

A.12.2.1 A.12.6.1 A.13.1.1 A.14.2.1

🔗 References & Sources 1

🔗

https://github.com/EVerest/EVerest/security/advisories/GHSA-5g3v-qc79-qqwr

security-advisories@github.com

Mitigation Vendor Advisory

📦 Affected Products / CPE 1 entries

linuxfoundation:everest

📊 CVSS Score

7.5

/ 10.0 — High

📊 CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack VectorN — None / Network

Attack ComplexityL — Low / Local

Privileges RequiredN — None / Network

User InteractionN — None / Network

ScopeU — Unchanged

ConfidentialityN — None / Network

IntegrityN — None / Network

AvailabilityH — High

📋 Quick Facts

Severity High

CVSS Score7.5

CWECWE-416

Exploit No

Patch ✗ No

Published 2026-03-26

Source Feed nvd

🇸🇦 Saudi Risk Score

7.0

/ 10.0 — Saudi Risk

Priority: HIGH

🏷️ Tags

CWE-416

🏢 Vendor Advisories

🔗 https://github.com/EVerest/EVerest/security/advisori...

⚡ Actions

🔗 NVD Official Page ⚡ Exploit-DB Search 🐙 GitHub PoC Search 🎯 MITRE ATT&CK 📊 CVE Details

💬 Comments

Loading comments

CVE-2026-27828

💬 Comments

Introduce Yourself

Sign In Required