Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
EVerest is an EV charging software stack. Prior to version 2026.02.0, when WithdrawAuthorization is processed before the TransactionStarted event, AuthHandler determines `transaction_active=false` and only calls `withdraw_authorization_callback`. This path ultimately calls `Charger::deauthorize()`, but no actual stop (StopTransaction) occurs in the Charging state. As a result, authorization withdrawal can be defeated by timing, allowing charging to continue. Version 2026.02.0 contains a patch.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-29044 EVerest is an EV charging software stack. Prior to version 2026.02.0, when WithdrawAuthorization is processed before the TransactionStarted event, AuthHandler determi… https://www.cve.org/CVERecord?id=CVE-2026-29044
Post summary
The post references CVE‑2026‑29044 in the EVerest EV charging stack, noting a timing flaw involving WithdrawAuthorization, but provides no PoC, exploit, patch, or evidence of active exploitation.
🚨*CVE* CVE-2026-29044 EVerest is an EV charging software stack. Prior to version 2026.02.0, when WithdrawAuthorization is processed before the TransactionStarted event, AuthHandler determi… https://www.cve.org/CVERecord?id=CVE-2026-29044 ----- Traducción: CVE-2026-29044 EVe… http://infoflow.cloud`
Post summary
The post briefly references CVE-2026-29044 in the EVerest EV charging stack and links to its CVE record, but provides no further technical, exploitation, or mitigation details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | linuxfoundation | everest | - | - | - |