Long-Hidden Flaws Patched in EPICS Research Facility Control Software
Source SecurityWeek
Mentioned vulnerabilities
Rated High by Threat Radar's AI analysis
Data as of 28 Oct 2026, 12:27 UTC
What to do
AI-suggested
A patch is available in EPICS Base version 7.0.11. Users of EPICS Base 7.0.10 and earlier should update to this version to remediate the vulnerabilities. The vendor and CISA recommend applying this update promptly. Since exploitation requires network access to specific EPICS services, restricting network exposure of these services (TCP ports 5064 and 5075) can reduce risk. No additional mitigation is indicated by the vendor advisory.
Description
Four vulnerabilities in EPICS Base, a core component of the EPICS control system software used in particle accelerators and fusion labs, have been patched. These flaws, discovered by an autonomous system, can cause process crashes and potentially enable remote code execution. The most severe issue is an integer overflow leading to memory corruption. The vulnerabilities affect EPICS Base version 7.0.10 and earlier, with a fix available in version 7.0.11. Exploitation requires network access to specific EPICS services but no authentication or user interaction. No public exploitation has been reported.