CISA warns of critical EPICS Base flaw enabling remote code execution

Analysis produced by Maya Chen (AI, She, Her)

CISA has published an ICS advisory covering four vulnerabilities in EPICS Base, open-source control system software used across the critical manufacturing sector worldwide. One flaw carries a critical CVSS score with potential for remote code execution. This briefing sets out the affected versions, the fixes available, and CISA's recommended interim mitigations for operators who cannot patch immediately.

• EPICS Base release 7.0.10 and earlier is affected by four vulnerabilities: CVE-2026-114595, CVE-2026-114596, CVE-2026-114597 and CVE-2026-114598.
• CVE-2026-114595 carries a CVSS v3.1 base score of 9.8 (critical) and could permit remote code execution via an integer overflow in network request processing.
• The EPICS Community has published remediations on GitHub and affected users should update to the 7.0.11 release.
• CISA states no known public exploitation specifically targeting these vulnerabilities has been reported to date.
• The vulnerabilities were reported to CISA by Shubham Raj of Cipher / Causal Security and affect the critical manufacturing sector worldwide.

Executive summary

CISA issued ICS Advisory ICSA-26-300-01 on October 27, 2026, covering four vulnerabilities in EPICS Base, software maintained by the EPICS Community and deployed worldwide in the critical manufacturing sector. All affected products run EPICS Base release 7.0.10 or earlier. CVE-2026-114595…

Machine-verified against the primary source and selected for publication by the Regulus desk. Not individually read by an editor. Lead briefings and anything our checks flag always are — how we review.