Zero Radar
← feed
CriticalVulnerabilityCVE-2026-114595updated 27 Oct 2026, 17:20 UTC

EPICS Base: network flaws can crash or take over control systems

EPICS is software used to run lab and industrial control equipment. Attackers on the network may be able to crash it or, in the worst case, run their own code on it.

Fix availableOfficial, 2 sources
SeverityCriticalCVSS 9.3 of 10
Being exploited?UnclearNo reports either way yet
Fix available?YesEPICS Base 7.0.11 (also see pvDataCPP pull request 109 and epics-base pull requests 934 and 937) · since 27 Oct 2026
How sure is this?Official, 2 sourcesBacked by an official source

How the attack works simplified

  1. 1Attacker on networkSends crafted network request
  2. 2Oversized length valueInteger overflow in request handling
  3. 3Wrong-sized memoryBuffer allocated too small
  4. 4Memory corruptedAttacker data written out of bounds
  5. ResultCrash or attacker code execution

What happened

Integer overflow and length-handling flaws in EPICS Base network request processing can cause wrong-sized memory allocation, memory corruption, and denial of service; remote code execution is possible per the advisory.

Why it is dangerous: A successful attack can stop control systems or let an attacker run code on them, affecting critical manufacturing and other infrastructure sites worldwide that rely on EPICS.

Are you affected?

You are affected if you run EPICS Base release 7.0.10 or earlier.

EPICS Base release 7.0.10 and prior

What to do

  1. Update EPICS Base to release 7.0.11 or later
  2. Apply the pvDataCPP fix from pull request 109 where pvDataCPP is used
  3. Contact the EPICS Controls team at epics-controls.org/support if you need help

Timeline

  1. 27 Oct 2026, 12:00 UTC
    Publicly disclosed
  2. 27 Oct 2026, 12:00 UTC
    Reported by CISA · CISA
  3. 27 Oct 2026, 16:10 UTC
    Picked up by Zero Radar
  4. 27 Oct 2026, 17:20 UTC
    NVD reported on it · NVD

Sources 2 reports, oldest first

Official vendor, government CERT or advisory database

Technical details

ID
CVE-2026-114595
CVSS
9.3 / 10
EPSS
0.5% chance of exploitation within 30 days
Disclosed
27 Oct 2026, 12:00 UTC
On Zero Radar
27 Oct 2026, 16:10 UTC (4 h after disclosure)
Last change
27 Oct 2026, 17:20 UTC

The plain-language parts and the attack diagram were written by an AI model (anthropic/claude-haiku-5.5) from the sources above. Facts like versions, exploitation and dates come from the sources themselves. How Zero Radar works

EPICS Base: network flaws can crash or take over control systems · Zero Radar