Live › vulnerability › CVE-2026-114597
Go to dashboardEPICS Base release 7.0.10 and earlier does not properly validate element or length values in a network message, so the application can read beyond an allocated buffer. An attacker can crash the process (denial of service) and may read adjacent memory contents.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 17:32 UTC. All times on this page are UTC.
Teams that run EPICS Base 7.0.10 or earlier with IOCs or gateways reachable over the network, since the flawed code parses incoming network messages. Systems not running EPICS Base, or running it only on isolated hosts with no network exposure, are less likely to be affected. The sources do not say which EPICS components or protocol paths are vulnerable.
No product ranges from the sources yet.
caget or the build's release file) and see whether it is 7.0.10 or earlier7.0.10Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read beyond the bounds of an allocated buffer. This may lead to denial of service and could expose adjacent memory contents.
This page as .md · .json · in your agent: get_signal("CVE-2026-114597")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.