CVE-2026-33014 EVerest has Delayed Authorization Response Bypasses Termination After RemoteStop

EVerest is an EV charging software stack. Prior to version 2026.02.0, during RemoteStop processing, a delayed authorization response restores authorized back to true, defeating the stoptransaction call condition on PowerOff events. As a result, the transaction can remain open even after a remote...

Missing Release of Resource after Effective Lifetime

Overview org.hibernate.reactive:hibernate-reactive-core is a The core module of Hibernate Reactive Affected versions of this package are vulnerable to Missing Release of Resource after Effective Lifetime by leaving transactions open in the connection pool. An attacker can cause resource exhaustio...