{"type":"post","id":"long-hidden-flaws-patched-in-epics-research-facility-4b2236","slug":"long-hidden-flaws-patched-in-epics-research-facility-4b2236","title":"Long-Hidden Flaws Patched in EPICS Research Facility Control Software","description":"Four patched vulnerabilities in EPICS Base can reportedly be triggered without authentication or user interaction by an attacker who can reach the relevant network services.","retrieval_nugget":"Four patched vulnerabilities in EPICS Base can reportedly be triggered without authentication or user interaction by an attacker who can reach the relevant network services. The finding matters to teams operating scientific control systems because the practical exposure question is network reachability, while public evidence still does not show exploitation or a working remote-code-execution exploit.","published_at":"2026-10-31","updated_at":"2026-10-31","record_date":"2026-10-31","date_kind":"published_at","topics":["security"],"entities":["EPICS Base","EPICS","Causal Security","Cipher","CISA","Channel Access","pvAccess"],"related_patterns":[],"novelty_label":"new_fact","what_changed":"Causal Security says all four flaws require no authentication or user interaction; it reports no exploitation to CISA and no verified exposed EPICS hosts.","prior_refs":["memory:49269c2d-0c83-8a53-a77e-9ade1edc2b39","memory:47b2cfd9-7eed-8f44-af46-cd708aeaddfe"],"source_url":"https://www.securityweek.com/long-hidden-flaws-patched-in-epics-research-facility-control-software","source_urls":["https://www.securityweek.com/long-hidden-flaws-patched-in-epics-research-facility-control-software"],"schema_version":"newruntime-agent-readable-v0.2","stable_id":"post:long-hidden-flaws-patched-in-epics-research-facility-4b2236","status":"published","visuals":[],"editor":{"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"routes":{"html":"https://newruntime.com/posts/long-hidden-flaws-patched-in-epics-research-facility-4b2236/","markdown":"https://newruntime.com/posts/long-hidden-flaws-patched-in-epics-research-facility-4b2236.md","json":"https://newruntime.com/posts/long-hidden-flaws-patched-in-epics-research-facility-4b2236.json"},"next_reads":[{"type":"topic","path":"/topics/security/","url":"https://newruntime.com/topics/security/","title":"Security","reason":"Explore the security topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/security.md","json_url":"https://newruntime.com/topics/security.json"},{"type":"collection","path":"/posts/","url":"https://newruntime.com/posts/","title":"Field Notes","reason":"Open the latest editorial analysis.","media_type":"text/html","json_url":"https://newruntime.com/posts.json"},{"type":"collection","path":"/source-ledger.json","url":"https://newruntime.com/source-ledger.json","title":"Source Ledger","reason":"Inspect the public source evidence graph.","media_type":"application/json"}]}