CYBERSECURITYTRACKER
Permanent story citation

EPICS Base

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 11485

As cited

Copy frozen at (site build).

ot ics

EPICS Base

Four critical integer overflow and buffer handling vulnerabilities affect EPICS Base release 7.0.10 and earlier, enabling remote code execution, memory corruption, denial of service, and information disclosure over the network. The EPICS Community released version 7.0.11 to address these flaws, with patches available in GitHub repositories. No active exploitation has been reported as of October 27, 2026.

Why it matters: Organizations operating industrial control systems worldwide using EPICS Base must patch to 7.0.11 immediately, as these network-exploitable vulnerabilities carry a critical CVSS 3.1 score of 9.8 and could compromise critical manufacturing infrastructure.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

ot ics

EPICS Base

Four critical integer overflow and buffer handling vulnerabilities affect EPICS Base release 7.0.10 and earlier, enabling remote code execution, memory corruption, denial of service, and information disclosure over the network. The EPICS Community released version 7.0.11 to address these flaws, with patches available in GitHub repositories. No active exploitation has been reported as of October 27, 2026.

Why it matters: Organizations operating industrial control systems worldwide using EPICS Base must patch to 7.0.11 immediately, as these network-exploitable vulnerabilities carry a critical CVSS 3.1 score of 9.8 and could compromise critical manufacturing infrastructure.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

ot ics

EPICS Base

Four critical integer overflow and buffer handling vulnerabilities affect EPICS Base release 7.0.10 and earlier, enabling remote code execution, memory corruption, denial of service, and information disclosure over the network. The EPICS Community released version 7.0.11 to address these flaws, with patches available in GitHub repositories. No active exploitation has been reported as of October 27, 2026.

Why it matters: Organizations operating industrial control systems worldwide using EPICS Base must patch to 7.0.11 immediately, as these network-exploitable vulnerabilities carry a critical CVSS 3.1 score of 9.8 and could compromise critical manufacturing infrastructure.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary