[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fzkutKGneWeynP4Q_AQVBPRSPBddtYvoQk1w2IY8itSc":3,"g5a-risk:CVE-2026-27816":120},{"success":4,"data":5,"meta":117},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":44,"epssPercentile":29,"epssTimeSeries":45,"severity":48,"affectedProducts":49,"affectedProductsCount":55,"references":56,"referencesCount":55,"weaknesses":63,"weaknessesCount":55,"isActivelyExploited":72,"cisaInfo":29,"otxData":29,"relatedBlogPosts":73,"seoMetadata":74,"configurations":99,"relatedVendorCves":108,"notableEvents":109},"CVE-2026-27816","What is CVE-2026-27816?","EVerest is an EV charging software stack. Prior to versions to 2026.02.0, ISO15118_chargerImpl::handle_update_energy_transfer_modes copies a variable-length list into a fixed-size array of length 6 without bounds checking. With schema validation disabled by default, oversized MQTT Cmd payloads can trigger out-of-bounds writes and corrupt adjacent EVSE state or crash the process. Version 2026.02.0 contains a patch.","EVerest is an EV charging software stack. Prior to versions to 2026.02.0, ISO15118_chargerImpl::handle_update_energy_transfer_modes copies a variable-length ...","2026-03-26T17:16:34.21","2026-06-17T10:27:44.06",5.5,"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",{"CVSSMetricV31":15,"CVSSMetricV30":32,"CVSSMetricV2":33,"CVSSMetricV40":34},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"nvd@nist.gov","Primary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H","NETWORK","LOW","NONE","UNCHANGED","HIGH",9.1,"CRITICAL",null,3.9,5.2,[],[],[35],{"Source":36,"Type":37,"CVSSData":38},"security-advisories@github.com","Secondary",{"Version":39,"VectorString":13,"BaseScore":12,"BaseSeverity":40,"AttackVector":41,"AttackComplexity":23,"AttackRequirements":24,"PrivilegesRequired":24,"UserInteraction":24,"VulnConfidentialityImpact":24,"VulnIntegrityImpact":24,"VulnAvailabilityImpact":26,"SubConfidentialityImpact":24,"SubIntegrityImpact":24,"SubAvailabilityImpact":24,"ExploitMaturity":42,"ConfidentialityRequirement":43,"IntegrityRequirement":43,"AvailabilityRequirement":43,"ModifiedAttackVector":43,"ModifiedAttackComplexity":43,"ModifiedAttackRequirements":43,"ModifiedPrivilegesRequired":43,"ModifiedUserInteraction":43,"ModifiedVulnConfidentialityImpact":43,"ModifiedVulnIntegrityImpact":43,"ModifiedVulnAvailabilityImpact":43,"ModifiedSubConfidentialityImpact":43,"ModifiedSubIntegrityImpact":43,"ModifiedSubAvailabilityImpact":43,"Safety":43,"Automatable":43,"Recovery":43,"ValueDensity":43,"VulnerabilityResponseEffort":43,"ProviderUrgency":43},"4.0","MEDIUM","LOCAL","PROOF_OF_CONCEPT","NOT_DEFINED",0.00204,[46,46,47,47,44,44,44],0.00342,0.00356,"Medium",[50],{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":4},"linuxfoundation","everest","*","cpe:2.3:o:linuxfoundation:everest:*:*:*:*:*:*:*:*",1,[57],{"url":58,"source":59,"tags":60},"https:\u002F\u002Fgithub.com\u002FEVerest\u002FEVerest\u002Fsecurity\u002Fadvisories\u002FGHSA-gq54-j8f4-xj8c","GitHub",[61,62],"Mitigation","Vendor Advisory",[64],{"id":65,"name":66,"description":67,"extendedDescription":68,"status":69,"abstraction":70,"structure":71},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",false,[],{"title":75,"metaDescription":76,"keywords":77,"canonicalUrl":78,"structuredData":79},"What is CVE-2026-27816? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2026-27816, a medium severity cyber security vulnerability from 2026. EVerest is an EV charging software stack. Prior to versio...","CVE-2026-27816, CVE-2026-27816 vulnerability, CVE-2026-27816 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2026, CVSS score, exploit, patch, remediation, linuxfoundation security, everest vulnerability","\u002Fwhat-is\u002Fcve-2026-27816",{"@context":80,"@type":81,"headline":75,"description":76,"datePublished":10,"dateModified":11,"author":82,"publisher":86,"about":90,"mainEntityOfPage":94,"articleSection":97,"keywords":98},"https:\u002F\u002Fschema.org","TechArticle",{"@type":83,"name":84,"url":85},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":83,"name":84,"url":85,"logo":87},{"@type":88,"url":89},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":91,"name":6,"description":92,"additionalType":93},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":95,"@id":96},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2026-27816","Cybersecurity","CVE-2026-27816, CVE-2026-27816 vulnerability, CVE-2026-27816 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[100],{"Operator":29,"Negate":29,"Nodes":101},[102],{"Operator":103,"Negate":72,"CPEMatch":104},"OR",[105],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":106,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":107,"VersionEndIncluding":29},"EB167E67-6808-4F7B-9505-FFF0C02B288C","2026.02.0",[],[110],{"id":111,"eventType":112,"eventTime":113,"details":114,"label":115,"color":116},"0232aea2-7234-44c7-87d4-0901afc4c6f4","NEW_NVD","2026-04-01T11:40:52.701541+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":11,"cacheTime":118,"version":119},1793227248994,"2.0",{"score":121,"band":122,"action":123,"scoredAt":124},21,"Low","Monitor","2026-10-28T07:13:55.638443+00:00"]