EVerest is an EV charging software stack.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Mar 26, 2026 · NIST NVD

   Detected

   EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to possible / corruption. The trigger is powermeter public key update and EV session/error events (while OCPP not started). This results in a TSAN data race report and an ASAN/UBSAN misaligned address runtime error being observed. Version 2026.02.0 contains a patch.

2. Jun 17, 2026 · NIST NVD

   Updated

   EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to possible / corruption. The trigger is powermeter public key update and EV session/error events (while OCPP not started). This results in a TSAN data race report and an ASAN/UBSAN misaligned address runtime error being observed. Version 2026.02.0 contains a patch.

Affected

• cpe linuxfoundation/everestversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-26073

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-26073

  EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to possible / corruption. The trigger is powermeter public key update and EV session/error events (while OCPP not started). This results in a TSAN data race repo

  nvd.nist.gov

References

• Vendor Advisory · github.com