[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fzkutKGneWeynP4Q_AQVBPRSPBddtYvoQk1w2IY8itSc":3,"g5a-risk:CVE-2026-27816":118},{"success":4,"data":5,"meta":115},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":44,"epssPercentile":29,"epssTimeSeries":45,"severity":46,"affectedProducts":47,"affectedProductsCount":53,"references":54,"referencesCount":53,"weaknesses":61,"weaknessesCount":53,"isActivelyExploited":70,"cisaInfo":29,"otxData":29,"relatedBlogPosts":71,"seoMetadata":72,"configurations":97,"relatedVendorCves":106,"notableEvents":107},"CVE-2026-27816","What is CVE-2026-27816?","EVerest is an EV charging software stack. Prior to versions to 2026.02.0, ISO15118_chargerImpl::handle_update_energy_transfer_modes copies a variable-length list into a fixed-size array of length 6 without bounds checking. With schema validation disabled by default, oversized MQTT Cmd payloads can trigger out-of-bounds writes and corrupt adjacent EVSE state or crash the process. Version 2026.02.0 contains a patch.","EVerest is an EV charging software stack. Prior to versions to 2026.02.0, ISO15118_chargerImpl::handle_update_energy_transfer_modes copies a variable-length ...","2026-03-26T17:16:34.21","2026-06-17T10:27:44.06",5.5,"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",{"CVSSMetricV31":15,"CVSSMetricV30":32,"CVSSMetricV2":33,"CVSSMetricV40":34},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"nvd@nist.gov","Primary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H","NETWORK","LOW","NONE","UNCHANGED","HIGH",9.1,"CRITICAL",null,3.9,5.2,[],[],[35],{"Source":36,"Type":37,"CVSSData":38},"security-advisories@github.com","Secondary",{"Version":39,"VectorString":13,"BaseScore":12,"BaseSeverity":40,"AttackVector":41,"AttackComplexity":23,"AttackRequirements":24,"PrivilegesRequired":24,"UserInteraction":24,"VulnConfidentialityImpact":24,"VulnIntegrityImpact":24,"VulnAvailabilityImpact":26,"SubConfidentialityImpact":24,"SubIntegrityImpact":24,"SubAvailabilityImpact":24,"ExploitMaturity":42,"ConfidentialityRequirement":43,"IntegrityRequirement":43,"AvailabilityRequirement":43,"ModifiedAttackVector":43,"ModifiedAttackComplexity":43,"ModifiedAttackRequirements":43,"ModifiedPrivilegesRequired":43,"ModifiedUserInteraction":43,"ModifiedVulnConfidentialityImpact":43,"ModifiedVulnIntegrityImpact":43,"ModifiedVulnAvailabilityImpact":43,"ModifiedSubConfidentialityImpact":43,"ModifiedSubIntegrityImpact":43,"ModifiedSubAvailabilityImpact":43,"Safety":43,"Automatable":43,"Recovery":43,"ValueDensity":43,"VulnerabilityResponseEffort":43,"ProviderUrgency":43},"4.0","MEDIUM","LOCAL","PROOF_OF_CONCEPT","NOT_DEFINED",0.00342,[44,44,44,44,44,44,44],"Medium",[48],{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"linuxfoundation","everest","*","cpe:2.3:o:linuxfoundation:everest:*:*:*:*:*:*:*:*",1,[55],{"url":56,"source":57,"tags":58},"https:\u002F\u002Fgithub.com\u002FEVerest\u002FEVerest\u002Fsecurity\u002Fadvisories\u002FGHSA-gq54-j8f4-xj8c","GitHub",[59,60],"Mitigation","Vendor Advisory",[62],{"id":63,"name":64,"description":65,"extendedDescription":66,"status":67,"abstraction":68,"structure":69},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",false,[],{"title":73,"metaDescription":74,"keywords":75,"canonicalUrl":76,"structuredData":77},"What is CVE-2026-27816? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2026-27816, a medium severity cyber security vulnerability from 2026. EVerest is an EV charging software stack. Prior to versio...","CVE-2026-27816, CVE-2026-27816 vulnerability, CVE-2026-27816 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2026, CVSS score, exploit, patch, remediation, linuxfoundation security, everest vulnerability","\u002Fwhat-is\u002Fcve-2026-27816",{"@context":78,"@type":79,"headline":73,"description":74,"datePublished":10,"dateModified":11,"author":80,"publisher":84,"about":88,"mainEntityOfPage":92,"articleSection":95,"keywords":96},"https:\u002F\u002Fschema.org","TechArticle",{"@type":81,"name":82,"url":83},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":81,"name":82,"url":83,"logo":85},{"@type":86,"url":87},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":89,"name":6,"description":90,"additionalType":91},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":93,"@id":94},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2026-27816","Cybersecurity","CVE-2026-27816, CVE-2026-27816 vulnerability, CVE-2026-27816 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[98],{"Operator":29,"Negate":29,"Nodes":99},[100],{"Operator":101,"Negate":70,"CPEMatch":102},"OR",[103],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":104,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":105,"VersionEndIncluding":29},"EB167E67-6808-4F7B-9505-FFF0C02B288C","2026.02.0",[],[108],{"id":109,"eventType":110,"eventTime":111,"details":112,"label":113,"color":114},"0232aea2-7234-44c7-87d4-0901afc4c6f4","NEW_NVD","2026-04-01T11:40:52.701541+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":11,"cacheTime":116,"version":117},1792436202667,"2.0",{"score":119,"band":46,"action":120,"scoredAt":121},54,"Plan remediation","2026-10-16T07:12:22.380233+00:00"]