https://pwn.watch/i/epics-base-7-0-11-critical-memory-bugs-oct-2026 On October 27 CISA published ICS advisory ICSA-26-300-01 for EPICS Base, the open source control-system toolkit used to run particle accelerators, fusion experiments and other large research facilities. EPICS Base 7.0.10 and earlier have four bugs in network message handling: CVE-2026-114595 (CVSS 3.1 9.8, critical), an integer overflow in network request processing that allocates memory with the wrong size and can lead to memory corruption, denial of service or potential remote code execution; CVE-2026-114596 (8.2), an integer overflow from improper message length validation that causes an out-of-bounds write; CVE-2026-114597 (7.5), out-of-bounds reads from insufficient bounds checking; and CVE-2026-114598 (7.5), a type confusion that can cause denial of service and expose adjacent memory. Shubham Raj of Causal Security reported them, and The Register reports the company's autonomous AI agent Cipher found all four in under four hours. The EPICS community released EPICS Base 7.0.11 with the fixes; CISA's advisory does not mention exploitation. Update to 7.0.11 and keep EPICS networks isolated from untrusted access. en Tue, 27 Oct 2026 00:00:00 GMT https://pwn.watch/i/epics-base-7-0-11-critical-memory-bugs-oct-2026 https://pwn.watch/i/epics-base-7-0-11-critical-memory-bugs-oct-2026#2026-10-27-339f264d Tue, 27 Oct 2026 00:00:00 GMT critical <p><a href="https://github.com/epics-base/epics-base/releases/tag/R7.0.11">Source</a></p> https://pwn.watch/i/epics-base-7-0-11-critical-memory-bugs-oct-2026 https://pwn.watch/i/epics-base-7-0-11-critical-memory-bugs-oct-2026#2026-10-27-1dd09c99 Tue, 27 Oct 2026 00:00:00 GMT critical <p><a href="https://www.cisa.gov/news-events/ics-advisories/icsa-26-300-01">Source</a></p>