CVE-2026-22593: EVerest has off-by-one stack buffer overflow in IsoMux certificate filename parsing
EVerest is an EV charging software stack. Prior to version 2026.02.0, an off-by-one check in IsoMux certificate filename handling causes a stack-based buffer overflow when a filename length equals MAXFILENAMELENGTH (100). A crafted filename in the certificate directory can overflow filenames[idx], corrupting stack state and enabling potential code execution. Version 2026.02.0 contains a patch.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-22593?
CVE-2026-22593 has a critical severity rating due to its potential exploitation leading to remote code execution.
How do I fix CVE-2026-22593?
To fix CVE-2026-22593, update the EVerest IsoMux software to version 2026.02.0 or later.
What causes CVE-2026-22593?
CVE-2026-22593 is caused by an off-by-one stack buffer overflow that occurs during certificate filename parsing.
What are the consequences of not addressing CVE-2026-22593?
Not addressing CVE-2026-22593 can lead to potential remote code execution threats, compromising system security.
Which versions of EVerest are affected by CVE-2026-22593?
EVerest versions prior to 2026.02.0 are affected by CVE-2026-22593.