AI 'hacker' finds 4 severe bugs in popular industrial control software in under 4 hours
An AI agent called Cipher identified multiple high-severity bugs in the widely-used EPICS (Experimental Physics and Industrial Control System) toolkit used to operate major scientific facilities and particle accelerators. The flaws include a critical integer overflow vulnerability (CVE-2026-114595) enabling remote code execution, plus three additional high-severity bugs affecting memory validation and type handling. CISA has advised users to update to EPICS Base 7.0.11 to mitigate risks of denial-of-service, memory corruption, data disclosure, and arbitrary code execution.
Key points
- Four vulnerabilities found in EPICS Base by AI agent in under 4 hours
- Critical CVE-2026-114595 (CVSS 9.8) enables remote code execution
- Impacts scientific research facilities and particle accelerators
- CISA recommends updating to EPICS Base 7.0.11
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. The Register did the reporting; read the original for the full story.
Read the full story at The Register
