CVE-2025-68134CWE-20

EVerest's use of assert functions can potentially lead to denial of service

High · published January 21, 2026

CVSS v3.1
7.4
EPSS
0%
Percentile
6.9
In the wild
Unconfirmed
What it is

⚡ One tiny error in EVerest could cause a power outage for everyone! 😱 Just one assert failure can crash the entire EV charging system, leaving users stranded. Think of it like a theme park where one ride's malfunction causes the whole park to shut down — no more thrill rides for anyone! In this case, if one module goes down, the manager shuts everything else off, leaving users in the lurch. This vulnerability can create a denial of service situation where multiple EV charging stations stop operating, impacting countless users trying to charge their vehicles. Imagine a busy charging station where all the power is cut off just because of one tiny software error — absolutely devastating!

Put simply

Think of it like a theme park where one ride's malfunction causes the whole park to shut down — no more thrill rides for anyone! In this case, if one module goes down, the manager shuts everything else off, leaving users in the lurch. The issue stems from the use of the `assert` function to handle errors in EVerest prior to version 2025.10.0, which frequently leads to module crashes. When one module crashes, it triggers a shutdown of all other connected modules, resulting in downtime.

What to do

This vulnerability can create a denial of service situation where multiple EV charging stations stop operating, impacting countless users trying to charge their vehicles. Imagine a busy charging station where all the power is cut off just because of one tiny software error — absolutely devastating! Upgrade to EVerest version 2025.10.0 immediately to resolve this issue! Ensure you have robust error handling in place to prevent similar issues from happening in the future. You've got this! Fixing this vulnerability will ensure a smoother ride for everyone using the EV charging network! 🛡️

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00177 · 6.9th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2026-01-21T18:32Z
EPSS history
Timeline
  • 21 JAN 18:32Z
    EVerest's use of assert functions can potentially lead to denial of service
    cvelistv5