CVE-2026-24003 EvseV2G has sequence state validation bypass

EVerest is an EV charging software stack. In versions up to and including 2025.12.1, it is possible to bypass the sequence state verification including authentication, and send requests that transition to forbidden states relative to the current one, thereby updating the current context with...

CVE-2026-24003

CVE-2026-24003 (EvseV2G) affects the EV charging software stack EVerest up to version 2025.12.1 . The issue is a bypass of the sequence/state verification, including authentication, allowing requests to transition to forbidden states and update the current context with illegitimate data. The inte...

PT-2026-4826

Name of the Vulnerable Software and Affected Versions EVerest versions prior to 2025.12.1 Description EVerest is an EV charging software stack susceptible to a bypass of sequence state verification, including authentication. This allows sending requests that transition to forbidden states,...