CVE-2026-22790 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

EVerest is an EV charging software stack. Prior to version 2026.02.0, `HomeplugMessage::setup_payload` trusts `len` after an `assert`; in release builds the che…
High CVSS: 8.8

CVE-2026-22790

EVerest is an EV charging software stack. Prior to version 2026.02.0, `HomeplugMessage::setup_payload` trusts `len` after an `assert`; in release builds the check is removed, so oversized SLAC payloads are `memcpy`'d into a ~1497-byte stack buffer, corrupting the stack and enabling remote code execution from network-provided frames. Version 2026.02.0 contains a patch.
Vendor
Linuxfoundation
Product
Everest
CWE
CWE-121
Yayın Tarihi
2026-03-26 15:16:31
Güncelleme
2026-03-31 13:50:31
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-121 Everest HIGH Linuxfoundation 2026

Referanslar

https://github.com/EVerest/EVerest/security/advisories/GHSA-wh8w-7cfc-gq7m https://github.com/EVerest/EVerest/security/advisories/GHSA-wh8w-7cfc-gq7m