CVE-2026-33009
EVerest is an EV charging software stack.
Published Mar 26, 2026 · updated Jun 17, 2026 · linuxfoundation everest
EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to C++ UB (potential memory corruption). This is triggered by an MQTT message and results in / accessed concurrently without lock. Version 2026.02.0 contains a patch.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Mar 26, 2026 · NIST NVD
Detected
EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to C++ UB (potential memory corruption). This is triggered by an MQTT message and results in / accessed concurrently without lock. Version 2026.02.0 contains a patch.
Jun 17, 2026 · NIST NVD
Updated
EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to C++ UB (potential memory corruption). This is triggered by an MQTT message and results in / accessed concurrently without lock. Version 2026.02.0 contains a patch.
Affected
- cpe linuxfoundation/everestversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-33009
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-33009
EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to C++ UB (potential memory corruption). This is triggered by an MQTT message and results in `Charger::shar
nvd.nist.gov