CVE-2026-114595

LOWCVSS 9.3 · CRITICAL

Signal is active with 5 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size. Subsequent handling of attacker supplied data may result in memory corruption, denial of service, or potential remote code execution.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-190

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 7 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Peaked at 5 mentions on most recent observed day (2026-10-28)
  • 7 total mentions across 2 days

Deep dive

Activity timeline7 mentions / 2d
01345Mentions · 2026-10-27: 2Mentions · 2026-10-28: 510-2710-28
Referenced assets3 URLs
Full discourse7 posts
  • International Cyber Digest@IntCyberDigest

    ‼️ An AI agent took under 4 hours to find 4 severe flaws in software that runs particle accelerators and fusion experiments, its maker says. The worst, CVE-2026-114595, is rated 9.8 and could let hackers run code remotely in EPICS base. https://t.co/YVcPNSJEP1

    2454135387821.1K
    264.9K followersView on X
  • Ecliptica Labs@EclipticaLabs

    AI agent Cipher (Causal Security) found 4 severe flaws in EPICS Base in under 4 hrs. Critical CVE-2026-114595 (9.8): integer overflow → potential RCE on systems controlling particle accelerators experiments. Block rouge models using https://replay.eclipticalabs.com #AISecurity

    00031112
    11 followersView on X
  • Daily CyberSecurity@Daily_CyberSec

    CISA warns of EPICS Base vulnerabilities in the industrial control system toolkit, led by critical RCE flaw CVE-2026-114595. Update to 7.0.11. #EPICS #ICS #IndustrialControlSystem #CISA #CVE2026114595 #RCE #OTSecurity #Vulnerability https://meterpreter.org/epics-base-vulnerabilities-cve-2026-114595/

    01020262
    13.1K followersView on X
  • Parameter Watch@ParameterWatch

    🚨 CVE-2026-114595 (9.8) 🚨 EPICS Base, the control system software, lets anyone who can send it a network request crash it, and possibly run code on the machine. EPICS Base 7.0.10 and earlier is affected. No fixed version is named yet. https://t.co/yTxhTqfTtm

    1002077
    21 followersView on X
  • B@User6789548

    CVE-2026-114595, rated 9.8, could allow a hacker to remotely execute code on EPICS base @grok confirm this

    1001048
    1.3K followersView on X
  • Security Arsenal, LLC@SecurityAr58409

    🔒 #CyberSecurity EPICS Base CVE-2026-114595–598: Critical ICS Flaws Enable RCE — Detection and R… "CISA has issued an advisory (ICSA-26-300-01) warning of three critical…" 🔗 https://securityarsenal.com/blog/epics-base-cve-2026-114595-598-critical-ics-flaws-enable-rce-detection-and-remediation-guide #CyberSecurity #ThreatIntel #mdr #threathunting #endpointdetection

    0000062
    39 followersView on X
  • NewsTongue@NewsTongueX

    🔴 CISA alerts on four critical flaws in EPICS Base control system software The US Cybersecurity and Infrastructure Security Agency issued a warning on four vulnerabilities affecting EPICS Base version 7.0.10 and earlier (CVE-2026-114595, CVE-2026-114596, CVE-2026-114597, CVE-2026-114598). Successful exploitation could allow denial-of-service, memory corruption, sensitive information disclosure, or arbitrary code execution. The vulnerabilities affect critical manufacturing infrastructure deployed worldwide. Shubham Raj of Cipher/Causal Security reported them to CISA.

    0000066
    1.0K followersView on X

Explore more