Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-23955

EVerest is an EV charging software stack. Prior to version 2025.9.0, in several places, integer values are concatenated to literal strings when throwing errors. This results in pointers arithmetic instead of printing the integer value as expected, like most of interpreted languages. This can be used by malicious operator to read unintended memory regions, including the heap and the stack. Version 2025.9.0 fixes the issue.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:000d073c8db71b3da40086d114122871787f81246f2582b35ff0b1a2217bd608
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0

Affected products and versions

1 source assertion
{"product":"everest-core","vendor":"EVerest","versions":[{"status":"affected","version":"< 2025.9.0"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:6c2ae25f7c1c70c1aea849f202096edd1e5afa1902d0b8d576c5db9d8aff7047 · sha256:3714e1c0390cd1b2… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":4.2,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:6c2ae25f7c1c70c1aea849f202096edd1e5afa1902d0b8d576c5db9d8aff7047 · sha256:3714e1c0390cd1b2… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

1 source assertion
{"cweId":"CWE-1046","description":"CWE-1046: Creation of Immutable Text Using String Concatenation","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:6c2ae25f7c1c70c1aea849f202096edd1e5afa1902d0b8d576c5db9d8aff7047 · sha256:3714e1c0390cd1b2… · /containers/cna/problemTypes/0/descriptions/0

Source references

1 source assertion
{"name":"https://github.com/EVerest/everest-core/security/advisories/GHSA-px57-jx97-hrff","tags":["x_refsource_CONFIRM"],"url":"https://github.com/EVerest/everest-core/security/advisories/GHSA-px57-jx97-hrff"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:6c2ae25f7c1c70c1aea849f202096edd1e5afa1902d0b8d576c5db9d8aff7047 · sha256:3714e1c0390cd1b2… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer