Daily OT Security News: November 01, 2026

Source verification: This edition is based only on the verified advisories, vulnerability records, and reporting listed below. 1. EPICS Base flaws expose control-system deployments to potential code execution CISA’s October 27 advisory ICSA-26-300-01 identifies four vulnerabilities in EPICS Base releases 7.0.10 and earlier: CVE-2026-114595, CVE-2026-114596, CVE-2026-114597, and CVE-2026-114598. CISA reports a CVSS v3 score of 9.8 and says successful exploitation could cause denial of service, memory corruption, sensitive-information disclosure, or potentially arbitrary code execution. SecurityWeek reports that the flaws involve Channel Access and pvAccess network communications and that CISA recommends updating to EPICS Base 7.0.11. Its reporting describes scientific-facility control use, while CISA separately identifies Critical Manufacturing as the advisory’s sector…