CVE-2025-68135
Medium · 6.5CVSS
6.5
EPSS
0.3%
Published
Jan 21, 2026
CISA due date
—
The record
EVerest is an EV charging software stack. Prior to version 2025.10.0, C++ exceptions are not properly handled for and by the `TbdController` loop, leading to its caller and itself to silently terminates. Thus, this leads to a denial of service as it is responsible of SDP and ISO15118-20 servers. Version 2025.10.0 fixes the issue.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-80135 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-703
- CVE-2026-57445 Gardens v2 is a modular governance framework that enables communities to create and… CWE-703
- CVE-2026-82417 ### Summary `qs.stringify` throws a `TypeError` when it serializes an object whose own… CWE-703
- CVE-2026-26446 Stomper 5e2741e is vulnerable to Denial of Service. CWE-703
- CVE-2026-18638 Any authenticated Velociraptor user — including one holding only the readerrole — can… CWE-703
- CVE-2026-56818 Netty is an asynchronous, event-driven network application framework. CWE-703
- CVE-2026-20187 As part of Cisco's ongoing commitment to proactive security and product quality, the… CWE-703
- CVE-2026-51600 Tenda CP3 V3.0 firmware V31.1.9.91 does not validate the Content-Length header field in… CWE-703