Cipher Finds Four Flaws in EPICS Control Software

Oct 28, 2026
Causal Security's Cipher AI agent found four vulnerabilities in EPICS Base in under four hours, including a critical flaw that could enable remote code execution.

Cipher, an autonomous AI agent from Causal Security, found four previously unknown vulnerabilities in EPICS Base in three hours and 49 minutes, according to The Register. The Cybersecurity and Infrastructure Security Agency (CISA) warns that successful exploitation could crash processes, corrupt memory, expose information or allow arbitrary code execution.

The most severe flaw, CVE-2026-114595, has a CVSS score of 9.8 and could let attacker controlled network data cause an out of bounds heap write, potentially enabling remote code execution. The other three flaws, CVE-2026-114596, CVE-2026-114597 and CVE-2026-114598, can cause memory writes, memory reads, process crashes or denial of service.

EPICS is used to build control systems for scientific and industrial facilities, including particle accelerators and fusion experiments. Exploitation requires access to vulnerable EPICS services on a control network. Fixes are available in EPICS Base version 7.0.11.

We hope you enjoyed this article

Consider subscribing to one of our newsletters like Cybersecurity AI Weekly or Daily AI Brief.

Also, consider following us on social media:

Cybersecurity AI AI Brief AI Brief (X)
Free newsletter

Cybersecurity AI Weekly

Weekly newsletter about AI in Cybersecurity.

Guide
10 most valuable public AI chip companies

10 most valuable public AI chip companies

Publicly traded companies designing merchant silicon for AI computing, ranked by market capitalization at the close of 23 October 2026.

AI Token Webinar

Whitepaper

Tensordyne Napier: What If One Rack Could Do the Work of Nine?

Tensordyne

This Tensordyne whitepaper presents Napier, an inference-focused AI processor and rack-scale system based on the company’s TDN Math logarithmic number system. It examines infrastructure requirements for large mixture-of-experts and agentic models, compares major inference architecture approaches, and details the TDN AIP processor, TDN72 pod, TDN Link fabric, and Napier Ultra configuration. The paper reports simulation-based performance, cost, and accuracy-validation results, including Tensordyne’s projected comparison of one Napier rack with a nine-rack Nvidia Rubin plus Groq deployment; the chip is reported as taped out and in fabrication.

Read more

You may also like

Free, six days a week

Daily AI Brief: the AI news that matters, in your inbox.