The EPICS Community has 4 CVEs on record. 4 were published in the last 90 days. The busiest recent month was October 2026 with 4. The median CVSS is 7.8 (high), with 1 rated critical.
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.8
- Publish → KEV
- —
- Last 90 days
- 4 prev 0
Worst active — by depth score
CVE-2026-114595Critical· 9.8Integer overflow or wraparound in EPICS Base54CVE-2026-114596High· 8.2Integer overflow or wraparound in EPICS Base45CVE-2026-114598High· 7.5Access of resource using incompatible type ('type confusion') in EPICS Base41CVE-2026-114597High· 7.5Improper handling of length parameter inconsistency in EPICS Base41
The EPICS Community vulnerabilities
CVEs affecting The EPICS Community, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2026-114596High· 8.2Integer overflow or wraparound in EPICS Base
In EPICS Base release 7.0.10 and prior, an improper validation of message length values during protocol parsing can trigger an integer overflow, resulting in an out-of-bounds memory write. Successful exploitation can cause process instab…
CVE-2026-114595Critical· 9.8Integer overflow or wraparound in EPICS Base
In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size. Subsequent handling of attacker supplied data may result in memory corruption, denial of s…
CVE-2026-114597High· 7.5Improper handling of length parameter inconsistency in EPICS Base
In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read beyond the bounds of an allocated buffer. This may lead to denial of service and could …
CVE-2026-114598High· 7.5Access of resource using incompatible type ('type confusion') in EPICS Base
In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read beyond the bounds of an allocated buffer. This may lead to denial of service and could …