EPICS Base 7.0.11 fixes four severe bugs, one rated 9.8
Causal Security’s Cipher agent reported the flaws in under four hours; CISA warns of crashes, memory disclosure or possible code execution.
76
CVE-2026-114595
Integer overflow in EPICS Base network request processing
- CVSS 4.0
- 9.3 critical
- EPSS
- <1%p43
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
EPICS Base 7.0.10 and earlier has an integer overflow while processing network requests, so memory can be allocated at the wrong size. Impact is denial of service or possible remote code execution on systems running those releases.
What to do: No fixed release is stated. Apply the EPICS update for CVE-2026-114595 when it is published.
| Product | Affected |
|---|---|
| EPICS Base | 7.0.10 and prior |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size. Subsequent handling of attacker supplied data may result in memory corruption, denial of service, or potential remote code execution.
- Weakness
- CWE-190
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
In the news
3 storiesFour EPICS Base flaws patched, one scored CVSS 9.8
Base 7.0.10 and earlier is affected; 7.0.11 is the fix, and CISA reports no public exploitation.
72
EPICS Base 7.0.10 and earlier: network flaws up to CVSS 9.8
Update to EPICS Base 7.0.11; the worst flaw can corrupt memory and may allow remote code execution.
72