CVE-2026-33014
EVerest has Delayed Authorization Response Bypasses Termination After RemoteStop
Résumé
EVerest has Delayed Authorization Response Bypasses Termination After RemoteStop
Description d'origine
La description telle que publiée par la source (souvent en anglais).
EVerest is an EV charging software stack. Prior to version 2026.02.0, during RemoteStop processing, a delayed authorization response restores authorized back to true, defeating the stop_transaction() call condition on PowerOff events. As a result, the transaction can remain open even after a remote stop. Version 2026.02.0 contains a patch.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov