CVE-2026-114595
Integer overflow or wraparound in EPICS Base
CRITICAL 9.3EPSS 0.5%
In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size. Subsequent handling of attacker supplied data may result in memory corruption, denial of service, or potential remote code execution.
- Affected
- The EPICS Community · EPICS Base
- CVSS v4.0 HQ
- 9.3 CRITICAL
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS v3.1 HQ
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- 0.50% chance of exploitation in the next 30 days, 43rd percentile
- Published
- 2026-10-27
Proof-of-concept exploits (2)
- 0xBlackash/CVE-2026-114595Repo stars 0★ · pushed 2026-10-28 · find archive
- 0xredash/CVE-2026-114595Repo stars 0★ · pushed 2026-10-28 · find archive