CVE-2026-101103: HMS Networks PEAK-System PCAN Windows drivers Classic Buffer Overflow

Published Oct 20, 2026

Updated

The PEAK-System PCAN diagnostic call did not validate that the caller-supplied output buffer was large enough to hold the output record.

Affected Software

1 affected component

HMS Networks PEAK-System PCAN Windows drivers

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade HMS Networks PEAK-System PCAN Windows drivers to a version that resolves this vulnerability.
Fixed in 5.1.4

Event History

Oct 20, 2026

CVE Published

via MITRE·08:19 PM

Data Sourced

via MITRE·08:19 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What level of access is required to exploit this issue?

An attacker needs local access and low privileges. No user interaction is required.

What is the expected security impact?

The issue is rated as affecting availability only, with no indicated confidentiality or integrity impact. Successful exploitation could cause a denial of service.