Integer Overflow Vulnerability in EPICS Base by The Collaboration for High Performance Computing
CVE-2026-114595

9.3CRITICAL

Key Information:

Vendor

The Epics Community

Status
Epics Base
Vendor
CVE Published:
27 October 2026

What is CVE-2026-114595?

In EPICS Base up to version 7.0.10, an integer overflow in the processing of network requests can lead to improper memory allocation. This vulnerability enables attackers to supply data that may corrupt memory, potentially resulting in a denial of service or even allowing the execution of arbitrary code remotely. Organizations using the affected versions of EPICS Base should prioritize assessing their systems and implementing the necessary updates to mitigate this risk.

Affected Version(s)

EPICS Base 0 <= 7.0.10

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-3...
government-resource

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Shubham Raj of Cipher / Causal Security reported these vulnerabilities to CISA.
.