CVE-2026-23995 - Vulnerability Analysis
HighCVSS: 8.4Last Updated: March 26, 2026
EVerest EV charging software stack - Buffer Overflow
Overview
EVerest EV charging software stack < 2026.02.0 contains a stack-based buffer overflow caused by passing an interface name longer than IFNAMSIZ (16) to CAN open routines, letting attackers potentially execute code, exploit requires a malicious or misconfigured interface name.
Severity & Score
Impact
Attackers can execute arbitrary code by triggering a buffer overflow via a crafted interface name, potentially leading to full system compromise.
Mitigation
Update to version 2026.02.0 or later.
Social Media Activity(2 posts)
š CVE-2026-23995 - High (8.4) EVerest is an EV charging software stack. Prior to version 2026.02.0, stack-based buffer overflow in CAN interface initialization: passing an interface name longer than IFNAMSIZ (16) to CAN open routines overflows `ifreq.ifr_name`, corrupting adja... š https://www.thehackerwire.com/vulnerability/CVE-2026-23995/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
View original postš CVE-2026-23995 - High (8.4) EVerest is an EV charging software stack. Prior to version 2026.02.0, stack-based buffer overflow in CAN interface initialization: passing an interface name longer than IFNAMSIZ (16) to CAN open routines overflows `ifreq.ifr_name`, corrupting adja... š https://www.thehackerwire.com/vulnerability/CVE-2026-23995/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
View original postRelated Resources
Details
- CVE ID
- CVE-2026-23995
- Severity
- High
- CVSS Score
- 8.4
- Type
- buffer_overflow
- Status
- new
- EPSS
- 1.5%
- Social Posts
- 2
CWE
- CWE-121
CVSS Metrics
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H