CVE-2026-114595
CVE-2026-114596 · CVE-2026-114597 · CVE-2026-114598Critical flaws in EPICS Base can let attackers crash systems or execute code remotely
EPICS Base 7.0.10 and earlier has several network message handling bugs, including integer overflows. Integer overflow means a calculation produces a number too large, which can lead to incorrect memory use. These flaws can cause denial of service, memory corruption, or potentially remote code execution. No fixed version has been announced, and the flaws are not on CISA's known-exploited list.
The EPICS Community EPICS Base · Updated 28 Oct · From 1 of our story and the public records
Being exploitedNot reportedNo attacks reported in the records
CISA known exploitedNot listedThe US list of flaws under attack
SeveritycriticalCVSS 9.3 of 10
FixNot yetSee what to do below
Am I affected?
The records do not list fixed versions yet. Check the vendor's advisory below.
What to do
- No fixed version or workaround is given in the records. Monitor EPICS Community security announcements for patches, and apply them as soon as they are released.
What happened
- 27 OctAn autonomous AI agent discovered four severe vulnerabilities in EPICS Base, including a critical remote code execution flaw.
The 4 records
| CVE | What it is | Severity | CISA listed | Exploit chance, 30 days |
|---|---|---|---|---|
| CVE-2026-114595 | Integer overflow or wraparound in EPICS Base | critical 9.3 | No | — |
| CVE-2026-114596 | Integer overflow or wraparound in EPICS Base | high 8.8 | No | — |
| CVE-2026-114597 | Improper handling of length parameter inconsistency in EPICS Base | high 8.7 | No | — |
| CVE-2026-114598 | Access of resource using incompatible type ('type confusion') in EPICS Base | high 8.7 | No | — |
Our reporting
27 OctAI agent discovers four severe vulnerabilities in widely used industrial control softwareReported elsewhere
www.theregister.com - Articles · 27 OctAI 'hacker' finds 4 severe bugs in popular industrial control software in under 4 hours ↗The records
CVE-2026-114595 on NVD ↗CVE-2026-114596 on NVD ↗CVE-2026-114597 on NVD ↗CVE-2026-114598 on NVD ↗Is anything you run affected?Members connect Zotpaper to their AI assistant. It checks your own project against every vulnerability on this page and the others we track, and says what to update.
How it works