CVE-2026-26070
EVerest: OCPP 2.0.1 EV SoC Update Race Causes Charge Point Crash
Résumé
EVerest: OCPP 2.0.1 EV SoC Update Race Causes Charge Point Crash
Description d'origine
La description telle que publiée par la source (souvent en anglais).
EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to std::map concurrent access (container/optional corruption possible). The trigger is an EV SoC update with powermeter periodic update and unplugging/SessionFinished state. Version 2026.2.0 contains a patch.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov