CVE-2026-114595

critical · 9.3

In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size. Subsequent handling of attacker supplied data may result in memory corruption, denial of service, or potential remote code execution.

9.3

CVSS

—

EPSS (exploit prob.)

—

EPSS percentile

2026-10-27

Published

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE-190

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-300-01

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-114595