View CSAF

Summary

Successful exploitation of these vulnerabilities could crash the Windows kernel.

The following versions of HMS Networks PEAK-System PCAN Windows drivers are affected:

PEAK-System Device Driver Setup <=5.1.2.1151 (CVE-2026-109576, CVE-2026-101103, CVE-2026-94188, CVE-2026-103672, CVE-2026-110322, CVE-2026-105960)

PCAN Windows CAN device drivers <=5.1.2 (CVE-2026-109576, CVE-2026-101103, CVE-2026-94188, CVE-2026-103672, CVE-2026-110322, CVE-2026-105960)

CVSS Vendor Equipment

v3 7.1 HMS Networks PEAK-System Device Driver Setup

5 Vulnerabilities

Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Improper Validation of Array Index, Untrusted Pointer Dereference, Improper Handling of Length Parameter Inconsistency

Background

Critical Infrastructure Sectors: Transportation Systems, Healthcare and Public Health, Energy, Critical Manufacturing

Countries/Areas Deployed: Worldwide

Company Headquarters Location:…