High · published January 21, 2026
⚡ An attacker can flood the EVerest charging software with endless TCP connections, causing a memory meltdown! 🔥 Imagine a gas station desperately trying to manage thousands of cars queuing for fuel, but instead, they just keep pulling in endlessly without filling up — total chaos! This is how the system gets overwhelmed, shutting down EV charging completely. If exploited, this vulnerability can lead to complete shutdown of all EV charging functionalities due to memory exhaustion. Users will be left stranded, unable to charge their electric vehicles, which could have dire consequences for transportation and mobility.
Imagine a gas station desperately trying to manage thousands of cars queuing for fuel, but instead, they just keep pulling in endlessly without filling up — total chaos! This is how the system gets overwhelmed, shutting down EV charging completely. This vulnerability allows an attacker to start multiple threads for TCP or TLS socket connections without any verification, leading to memory exhaustion and module termination in EVerest versions 2025.9.0 and below.
If exploited, this vulnerability can lead to complete shutdown of all EV charging functionalities due to memory exhaustion. Users will be left stranded, unable to charge their electric vehicles, which could have dire consequences for transportation and mobility. Update immediately to version 2025.10.0 to address this vulnerability. Additionally, review your connection handling to ensure that proper verification is in place before threads are initiated. Implementing rate limiting on incoming connections can also mitigate this issue. You can tackle this vulnerability with a quick update and some best practices! Security hero status: activated! 🛡️