CVE-2026-23955 EVerest vulnerable to concatenation of strings literal and integers
A malicious operator can read unintended memory regions, including heap and stack, due to incorrect string concatenation in EVerest.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2026-23955?
CVE-2026-23955 is a medium-severity vulnerability in everest-core, published on 21 Jan 2026. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
EVerest is an EV charging software stack. Prior to version 2025.9.0, in several places, integer values are concatenated to literal strings when throwing errors. This results in pointers arithmetic instead of printing the integer value as expected, like most of interpreted languages. This can be used by malicious operator to read unintended memory regions, including the heap and the stack. Version 2025.9.0 fixes the issue.
Weakness: CWE-1046
Which versions are affected by CVE-2026-23955?
It affects 1 product.
Products include Linuxfoundation Everest.
How do I fix CVE-2026-23955?
No fix has been published for CVE-2026-23955 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-23955 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-23955 exists.
Other vulnerabilities in everest-core
- CVE-2026-22790 EVerest's unchecked SLAC payload length causes stack overflow in HomeplugMessage::setup_payload
- CVE-2026-22593 EVerest has off-by-one stack buffer overflow in IsoMux certificate filename parsing
- CVE-2026-23995 EVerest has stack buffer overflow in ifreq.ifr_name when interface name exceeds IFNAMSIZ
- CVE-2025-68137 EVerest's Integer Overflow and Signed to Unsigned conversion lead to either stack buffer overflow or infinite loop
- CVE-2026-33009 EVerest: MQTT Switch-Phases Command Data Race Causing Charger State Corruptio
Sources
Also known as GHSA-px57-jx97-hrff.