CVE-2026-26070
EVerest: OCPP 2.0.1 EV SoC Update Race Causes Charge Point Crash
Summary
EVerest: OCPP 2.0.1 EV SoC Update Race Causes Charge Point Crash
Original description
The description as published by the source.
EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to std::map concurrent access (container/optional corruption possible). The trigger is an EV SoC update with powermeter periodic update and unplugging/SessionFinished state. Version 2026.2.0 contains a patch.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov