CRITICALCVSS v3.1 9.8Vulnerability

CVE-2026-114595

In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size. Subsequent handling of attacker supplied data may result in memory corruption, denial of service, or potential remote code execution.

Properties

First seen
2026-10-27T18:31:43+00:00
Cvss score
9.8
Last seen
2026-10-27T18:31:43+00:00
Euvd assigner
icscert
Retrieved at
2026-10-27T19:34:22+00:00
Src batch id
euvd-20261027T193402Z-b72e9a
Source url
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-111108
Score
9.8
Euvd base score version
4.0
Fetched at
2026-10-27T19:34:21+00:00
Euvd vendor
The EPICS Community
Cvss vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
First seen by Signal
2026-10-27T19:33:27+00:00
Euvd base score
9.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Content hash
b527e29c3504d7587189dd89781176b8d3c9882b07427385f31de62675db6742
Published at
2026-10-27T17:16:58.530
Euvd updated
2026-10-27T18:31:43+00:00
Last modified
2026-10-27T17:16:58.530
Euvd epss pct
0

Related Entities (1)

HAS_WEAKNESS (1)

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-114595 (CVSS v3.1 9.8) — Ninja Signal Threat Intelligence | Ninja Signal