Autonomous "Cipher" Agent Finds Four Flaws in EPICS Particle-Accelerator Control Software in Under Four Hours (CVE-2026-114595)

EPICS Base 7.0.10 and earlier, an open-source SCADA toolkit used at about 90 scientific and industrial facilities, including Argonne's Advanced Photon Source and ITER's fusion reactor controls

Causal Security's Cipher agent found and validated four previously unknown flaws in 3 hours and 49 minutes, with one human instruction authorizing deeper exploitability testing. CVE-2026-114595 (CVSS 9.8) is an integer overflow giving an attacker-controlled heap write and possible remote code execution; CVE-2026-114596 (8.2) is an out-of-bounds write that crashes controller processes; CVE-2026-114597 and CVE-2026-114598 (7.5 each) allow out-of-bounds reads and denial of service. CISA published advisory ICSA-26-300-01 on October 27, 2026. Fixed in EPICS Base 7.0.11. Exploitation requires reaching EPICS services on the control network

Memory-unsafe network protocol parsing in decades-old control software, now found at agent speed