The EPICS Community - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/vendors/the-epics-community/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 27 Oct 2026 16:40:03 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgEPICS Base: Remote code execution and denial of service (CVE-2026-114595, CVE-2026-114596, CVE-2026-114597, CVE-2026-114598)https://feed.craftedsignal.io/briefs/2026-10-epics-base-vulnerabilities/Tue, 27 Oct 2026 16:40:03 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-epics-base-vulnerabilities/EPICS Base versions 7.0.10 and earlier contain multiple critical vulnerabilities in network request processing that could allow unauthenticated remote attackers to cause denial-of-service, disclose memory contents, or execute arbitrary code.Multiple vulnerabilities exist in EPICS Base release 7.0.10 and prior, primarily involving integer overflows and improper handling of length parameters during network message parsing. These flaws can lead to out-of-bounds memory access, corruption, and remote code execution (RCE). The EPICS Community has released version 7.0.11 to address these issues.

Impact

Successful exploitation of these vulnerabilities allows for process instability, denial-of-service, sensitive information disclosure from process memory, and potential execution of arbitrary code with the privileges of the EPICS Base process.

Recommendation

  • Update all EPICS Base installations to release 7.0.11 immediately.
  • Review the upstream GitHub repository pull requests (PR #934, PR #937, and pvDataCPP PR #109) for technical implementation details of the fixes.
  • Restrict access to EPICS network ports to trusted management subnets to minimize the attack surface until patching is complete.
]]>criticaladvisorycritical-infrastructurememory-corruptioninteger-overflowrcedos