EVerest everest-core

Name: EVerest everest-core
Brand: EVerest

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

2critical4high6medium0low

updated 2026-10-28

vulnerabilities (31)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-68137US	—	1.31% (70th)	Exploit	no fix	2026-01-21	≤ < 2025.10.0
CVE-2024-37310US	—	0.67% (52nd)	—	2024.6.0	2024-07-10	2 versions
CVE-2026-22790US	—	0.55% (46th)	—	no fix	2026-03-26	≤ < 2026.02.0
CVE-2025-68133US	—	0.40% (34th)	—	no fix	2026-01-21	≤ < 2025.10.0
CVE-2026-26008US	high7.5	0.37% (31st)	—	no fix	2026-03-26	≤ < 2026.02.0
CVE-2025-68135US	—	0.33% (26th)	—	no fix	2026-01-21	≤ < 2025.10.0
CVE-2026-26073US	—	0.32% (24th)	—	no fix	2026-03-26	≤ < 2026.02.0
CVE-2025-68136US	—	0.30% (23rd)	—	no fix	2026-01-21	≤ < 2025.10.0
CVE-2026-29044US	medium6.5OT elevated	0.30% (22nd)	—	no fix	2026-03-26	≤ < 2026.02.0
CVE-2026-27828US	high7.5	0.30% (22nd)	—	no fix	2026-03-26	≤ < 2026.02.0
CVE-2025-68132US	medium4.6	0.29% (21st)	—	no fix	2026-01-21	≤ < 2025.12.0
CVE-2026-27815US	critical9.1	0.28% (21st)	—	no fix	2026-03-26	≤ < 2026.02.0
CVE-2025-68141US	—	0.28% (21st)	—	no fix	2026-01-21	≤ < 2025.10.0
CVE-2026-24003US	medium5.3OT elevated	0.28% (20th)	—	no fix	2026-01-26	≤ ≤ 2025.12.1
CVE-2026-33009US	medium6.5	0.25% (17th)	—	no fix	2026-03-26	≤ < 2026.02.0
CVE-2026-33015US	—OT elevated	0.22% (13th)	—	no fix	2026-03-26	≤ < 2026.02.0
CVE-2026-33014US	—OT elevated	0.22% (12th)	—	no fix	2026-03-26	≤ < 2026.02.0
CVE-2026-23995US	high7.8	0.21% (12th)	—	no fix	2026-03-26	≤ < 2026.02.0
CVE-2026-27816US	critical9.1	0.20% (10th)	—	no fix	2026-03-26	≤ < 2026.02.0
CVE-2026-23955US	—	0.20% (9th)	—	no fix	2026-01-21	≤ < 2025.9.0
CVE-2025-68138US	—	0.18% (8th)	—	0.30.1	2026-01-21	libocpp → 0.30.1
CVE-2025-68134US	—	0.18% (7th)	—	no fix	2026-01-21	≤ < 2025.10.0
CVE-2025-68139US	—	0.17% (6th)	—	no fix	2026-01-21	≤ ≤ 2025.12.1
CVE-2025-68140US	—OT elevated	0.15% (4th)	—	no fix	2026-01-21	≤ < 2025.9.0
CVE-2026-26074US	—	0.15% (4th)	—	no fix	2026-03-26	≤ < 2026.02.0
CVE-2026-22593US	high7.8	0.14% (3rd)	—	no fix	2026-03-26	≤ < 2026.02.0
CVE-2026-27814US	medium4.2	0.14% (3rd)	—	no fix	2026-03-26	≤ < 2026.02.0
CVE-2026-26072US	—	0.14% (3rd)	—	no fix	2026-03-26	≤ < 2026.02.0
CVE-2026-26071US	—	0.14% (3rd)	—	no fix	2026-03-26	≤ < 2026.02.0
CVE-2026-27813US	—	0.13% (3rd)	—	no fix	2026-03-26	≤ < 2026.02.0
CVE-2026-26070US	medium4.2	0.11% (1st)	—	no fix	2026-03-26	≤ < 2026.02.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')6 CVEs
CWE-863Incorrect Authorization5 CVEs
CWE-416Use After Free3 CVEs
CWE-770Allocation of Resources Without Limits or Throttling3 CVEs
CWE-787Out-of-bounds Write3 CVEs
CWE-121Stack-based Buffer Overflow2 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-125Out-of-bounds Read2 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)31 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan