Long-Hidden Flaws Patched in EPICS Research Facility Control Software
Four vulnerabilities in EPICS Base could allow attackers to crash processes in control systems used at particle accelerators, fusion experiments and other large research facilities. One flaw could potentially lead to code execution.
CISA disclosed the issues in an advisory published on Tuesday, saying they impact EPICS Base 7.0.10 and earlier. The agency recommends updating to version 7.0.11.
The vulnerabilities were discovered by Cipher, an autonomous security research system made by Causal Security.
EPICS is an open source software toolkit that scientific facilities rely on to build their control systems, and EPICS Base is its central component. According to Causal, ITER’s fusion reactor control system is based on EPICS, and the Advanced Photon Source at Argonne National Laboratory makes heavy use of it.
The most severe of the bugs is CVE-2026-114595 (CVSS score of 9.8), an integer overflow that can occur when network requests are processed. According to CISA, it...
Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE
