Buffer Overflow Vulnerability in EPICS Base by Argonne National Laboratory
CVE-2026-114598

8.7HIGH

Key Information:

Vendor

The Epics Community

Status
Epics Base
Vendor
CVE Published:
27 October 2026

What is CVE-2026-114598?

In EPICS Base versions up to 7.0.10, insufficient validation of element or length values in network messages allows for reading beyond the limits of an allocated buffer. This flaw may lead to denial of service and could potentially expose confidential adjacent memory contents, raising significant security and operational concerns.

Affected Version(s)

EPICS Base 0 <= 7.0.10

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-3...
government-resource

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Shubham Raj of Cipher / Causal Security reported these vulnerabilities to CISA.
.