Skip to content
Moojaz — موجز
Search
Menu
HomeRegionsMaghrebAfricaMiddle EastEuropeAsiaAmericasWorldSectionsPoliticsEconomySecurityHealthScienceTechnologyAIEnvironmentCultureSportsSearch
File

EPICS vulnerabilities and control-system security

This dossier follows vulnerabilities and fixes in EPICS scientific control software and AI's documented role in discovering them.

Last updated : 1 key moments
EPICS logo
EPICS logo, used for identification. — EPICS, Wikimedia Commons — domaine public (PD-textlogo).

Where things stand

As of 29 October 2026, four flaws have been disclosed and fixed in EPICS Base 7.0.11; the most serious is rated 9.8 out of 10.

Reported information

EPICS: four AI-discovered flaws have available fixes

Causal Security disclosed four flaws in EPICS Base scientific control software on 27 October 2026. Version 7.0.11 fixes them; the most serious, CVE-2026-114595, is rated 9.8 out of 10.

EPICS logo
EPICS logo, used for identification. — EPICS, Wikimedia Commons — domaine public (PD-textlogo).

The company says its Cipher agent found the flaws in 3 hours and 49 minutes, with one human authorization for deeper testing in an isolated environment. The Register interviewed its cofounder and also reports CISA's warning.

Exploitation requires reaching vulnerable EPICS services on a control network. Risks include process crashes, memory disclosure and possible code execution, which Cipher did not demonstrate. Operators are advised to install 7.0.11 or backported fixes and restrict network access.

Sources 2