CVE-2026-114595
CVSS 9.8 CRITICAL: in EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size.
Vulnerabilities · 5h ago
Causal Security says its autonomous agent Cipher found and validated four previously unknown vulnerabilities in EPICS Base in three hours and 49 minutes. One critical flaw may let a remote attacker execute code; the other three can crash processes, corrupt memory, or expose adjacent memory.
The flaws involve network-message handling: a message can claim a length or element count larger than the buffer EPICS reserved. Reading or writing beyond that boundary can damage memory or stop a control process; one flaw’s out-of-bounds heap write is the route to possible code execution. The fixes are included in EPICS Base 7.0.11.
That speed matters because it compresses flaw discovery in unfamiliar control software; it does not show AI operating physical experiments. At facilities using EPICS to run accelerators or fusion projects, a crash could disrupt experiments and possible code execution could put a control host at risk. Causal Security reported discovery, not exploitation in the wild, so the report does not establish that any installation was attacked.
CVSS 9.8 CRITICAL: in EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size.
CVSS 8.2 HIGH: in EPICS Base release 7.0.10 and prior, an improper validation of message length values during protocol parsing can trigger an integer overflow, resulting in an out-of-bounds memory write.
CVSS 7.5 HIGH: in EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read beyond the bounds of an allocated buffer.
CVSS 7.5 HIGH: in EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read beyond the bounds of an allocated buffer.
1 source covering this story
AI 'hacker' finds 4 severe bugs in popular industrial control software in under 4 hours
One critical, three high-severity EPICS bugs could disrupt research experiments
Part of the PlainSec briefing for 2026-10-27