CVE-2026-22593 - Vulnerability Analysis

Overview

EVerest EV charging software stack < 2026.02.0 contains a stack-based buffer overflow caused by an off-by-one error in IsoMux certificate filename handling, letting attackers execute code by crafting a filename of length 100, exploit requires crafted filename in certificate directory.

Severity & Score

Impact

Attackers can execute arbitrary code by exploiting a buffer overflow via crafted certificate filenames.

Mitigation

Update to version 2026.02.0 or later.

References

• https://github.com/EVerest/EVerest/security/advisories/GHSA-cpqf-mcqc-783m

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 26, 2026

🟠 CVE-2026-22593 - High (8.4) EVerest is an EV charging software stack. Prior to version 2026.02.0, an off-by-one check in IsoMux certificate filename handling causes a stack-based buffer overflow when a filename length equals `MAX_FILE_NAME_LENGTH` (100). A crafted filename i... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-22593/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner