{"metadata": {"vulnerability": "CVE-2026-114595", "count": 20, "kinds": {"milestone": 5, "sighting": 7, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-10-21T20:17:32.733Z", "date_only": false, "value": "2026-10-21T20:17:32.733Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-114595", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-22T12:39:31.518Z", "date_only": false, "value": "2026-10-22T12:39:31.518433Z", "kind": "other", "label": "Document generated", "source": "csaf_cisa \u00b7 ICSA-26-300-01", "record": "ICSA-26-300-01", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-27T05:00:00Z", "date_only": false, "value": "2026-10-27T05:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-300-01", "record": "CVE-2026-114595", "field": "creation_timestamp", "uuid": "4ae98083-fc3e-4d4d-8ba2-744ae7892b21", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-300-01"}, {"timestamp": "2026-10-27T06:00:00Z", "date_only": false, "value": "2026-10-27T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-26-300-01", "record": "ICSA-26-300-01", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-27T06:00:00Z", "date_only": false, "value": "2026-10-27T06:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-26-300-01", "record": "ICSA-26-300-01", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-27T06:00:00Z", "date_only": false, "value": "2026-10-27T06:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-26-300-01", "record": "ICSA-26-300-01", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-27T16:10:47.541Z", "date_only": false, "value": "2026-10-27T16:10:47.541665Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3myumsbfd3w2y", "record": "CVE-2026-114595", "field": "creation_timestamp", "uuid": "7c870586-a00a-4cbe-b922-b09fe8848b83", "content": "~Cisa~\nEPICS Base <=7.0.10 flaws enable DoS, memory disclosure, corruption, or code execution; update to 7.0.11.\n-\nIOCs: CVE-2026-114595, CVE-2026-114596, CVE-2026-114597\n-\n#CVE #ICS #ThreatIntel", "url": "https://bsky.app/profile/cyfar.ca/post/3myumsbfd3w2y"}, {"timestamp": "2026-10-27T16:48:37.138Z", "date_only": false, "value": "2026-10-27T16:48:37.138Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-114595", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-27T16:48:37.138Z", "date_only": false, "value": "2026-10-27T16:48:37.138Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-114595", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-27T16:48:37.138Z", "date_only": false, "value": "2026-10-27T16:48:37.138Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / icscert", "record": "CVE-2026-114595", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-27T17:01:27.386Z", "date_only": false, "value": "2026-10-27T17:01:27.386973Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117513944158688342", "record": "CVE-2026-114595", "field": "creation_timestamp", "uuid": "8c505d91-12c8-4d07-9956-501874dae657", "content": "CVE-2026-114595 Integer overflow or wraparound in EPICS Base In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size. Subsequent handling of attacker supplied data may result in memory corruption, denial of service, or potential remote code execution.\nhttps://www.cve.org/CVERecord?id=CVE-2026-114595https://www.cisa.gov/news-events/ics-advisories/icsa-26-300-01#TheEPICSCommunity #EPICSBase#CVE_2026_114595#bot", "url": "https://infosec.exchange/users/cve/statuses/117513944158688342"}, {"timestamp": "2026-10-27T17:16:58Z", "date_only": false, "value": "2026-10-27T17:16:58Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-Q8F9-5G2R-F3JG", "record": "GHSA-Q8F9-5G2R-F3JG", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-27T17:16:58.530Z", "date_only": false, "value": "2026-10-27T17:16:58.530", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-114595", "record": "FKIE_CVE-2026-114595", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-27T18:00:05.619Z", "date_only": false, "value": "2026-10-27T18:00:05.619270Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3myusvpjdiv2t", "record": "CVE-2026-114595", "field": "creation_timestamp", "uuid": "1324a191-5e23-425a-9444-51e987264872", "content": "CVE-2026-114595 - epics base\nVersions of EPICS Base up to 7.0.10 can miscalculate how much memory to set aside when handling network requests. This mistake could let an attacker cause the system to stop working or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#epicsbase #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3myusvpjdiv2t"}, {"timestamp": "2026-10-27T18:10:27.794Z", "date_only": false, "value": "2026-10-27T18:10:27.794372Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3myutib3khm22", "record": "CVE-2026-114595", "field": "creation_timestamp", "uuid": "7bff3836-1960-43cf-9479-b1920ca61768", "content": "\ud83d\udea8 CVE-2026-114595 \u2014 CVSS 9.3 CRITICAL\n\nIn EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-114595\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3myutib3khm22"}, {"timestamp": "2026-10-27T18:31:43Z", "date_only": false, "value": "2026-10-27T18:31:43Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-Q8F9-5G2R-F3JG", "record": "GHSA-Q8F9-5G2R-F3JG", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-27T18:31:43Z", "date_only": false, "value": "2026-10-27T18:31:43Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-Q8F9-5G2R-F3JG", "record": "GHSA-Q8F9-5G2R-F3JG", "field": "modified"}, {"timestamp": "2026-10-27T18:46:24.596Z", "date_only": false, "value": "2026-10-27T18:46:24.596871Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/veduis.bsky.social/post/3myuviixgfj2q", "record": "CVE-2026-114595", "field": "creation_timestamp", "uuid": "42b313de-7e30-474f-baba-2d263148bfc1", "content": "EPICS Base <=7.0.10 has four CVSS 9.8 flaws: CVE-2026-114595, CVE-2026-114596, CVE-2026-114597, CVE-2026-114598.\n\nExploitation can cause denial of service, memory corruption, data disclosure, or code execution.", "url": "https://bsky.app/profile/veduis.bsky.social/post/3myuviixgfj2q"}, {"timestamp": "2026-10-28T08:00:32.284Z", "date_only": false, "value": "2026-10-28T08:00:32.284291Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mywbuk4ou32m", "record": "CVE-2026-114595", "field": "creation_timestamp", "uuid": "a64b96e7-92c2-45de-aa45-201c746d12e0", "content": "CISA warns of EPICS Base vulnerabilities in the industrial control system toolkit, led by critical RCE flaw CVE-2026-114595. Update to 7.0.11.\n\n#EPICS #ICS #IndustrialControlSystem #CISA #CVE2026114595 #RCE #OTSecurity #Vulnerability", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mywbuk4ou32m"}, {"timestamp": "2026-10-28T14:46:23.633Z", "date_only": false, "value": "2026-10-28T14:46:23.633", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-114595", "record": "FKIE_CVE-2026-114595", "field": "lastModified"}], "metrics": {"as_of": "2026-11-01T04:15:17.824Z", "anchors": {"origin": {"timestamp": "2026-10-27T06:00:00Z", "date_only": false, "value": "2026-10-27T06:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-26-300-01", "record": "ICSA-26-300-01", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-27T06:00:00Z", "date_only": false, "value": "2026-10-27T06:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-26-300-01", "record": "ICSA-26-300-01", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 425717.824728, "hours": 118.25495131333332, "days": 4.927289638055555, "min_seconds": 425717.824728, "max_seconds": 425717.824728, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-27T06:00:00Z", "date_only": false, "value": "2026-10-27T06:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-26-300-01", "record": "ICSA-26-300-01", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-01T04:15:17.824Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}