← Database

CVE-2026-26072

MEDIUM CVSS: 4.2 Published: 2026-03-26 Modified: 2026-06-17

Description

EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to `std::map` concurrent access (container/optional corruption possible). The trigger is EV SoC update with powermeter periodic update and unplugging/SessionFinished status. Version 2026.02.0 patches the issue.

Affected Platforms

Linuxfoundation Everest

Weakness Type

CWE-362

References