---
id: "CVE-2026-114595"
kind: "vulnerability"
aliases: ["CVE-2026-114595"]
title: "EPICS Base: integer overflow in network requests corrupts memory, enables code execution"
severity: "critical"
cvss: 9.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["epics", "industrial-control", "infrastructure", "ioc", "scientific-control-systems"]
not_affected_if: ["isolated-network", "newer-epics-base"]
published_at: "2026-10-27T17:16:58+00:00"
first_seen_at: "2026-10-27T17:32:45+00:00"
updated_at: "2026-10-27T17:34:15+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114595", "first_seen_at": "2026-10-27T17:32:45+00:00"}]
---

# EPICS Base: integer overflow in network requests corrupts memory, enables code execution

EPICS Base release 7.0.10 and earlier has an integer overflow when it processes network requests, so memory is allocated with the wrong size. Attacker-supplied data handled afterward can corrupt memory, crash the service, or allow remote code execution.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Run `softIoc -V` or check the EPICS Base version in the build tree (unknown if the sources do not give the exact command)
- Confirm whether the installed EPICS Base is `7.0.10` or earlier

## Fix

- Move EPICS Base to a release newer than `7.0.10` (the patched version number is unknown from the sources)
- Restrict network access to IOC ports (CA 5064, PVA 5075) until patched

## Timeline

- 2026-10-27T17:32:45+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-114595

## From the sources

In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size. Subsequent handling of attacker supplied data may result in memory corruption, denial of service, or potential remote code execution.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_