CVE-2026-110322: HMS Networks PEAK-System PCAN Windows drivers Untrusted Pointer Dereference

Published Oct 20, 2026

Updated

The PEAK-System PCAN type 0x4030 processing path fails to validate a selected/returned object pointer before dereferencing fixed fields during post-processing.

Affected Software

1 affected component

HMS Networks PEAK-System PCAN Windows drivers

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade HMS Networks PEAK-System PCAN Windows drivers to a version that resolves this vulnerability.
Fixed in 5.1.4

Event History

Oct 20, 2026

CVE Published

via MITRE·08:26 PM

Data Sourced

via MITRE·08:26 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·09:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is exposed to this issue?

Systems running HMS Networks PEAK-System PCAN Windows drivers are in scope. The CVSS vector indicates exploitation requires local access rather than network reachability.

What access does an attacker need?

An attacker needs low privileges on the affected system. No user interaction is required according to the supplied CVSS vector.

What is the expected impact if exploitation succeeds?

The reported impact is availability only: high availability impact with no listed confidentiality or integrity impact. The vulnerability may allow a local attacker to cause a denial-of-service condition.

CVE-2026-110322: HMS Networks PEAK-System PCAN Windows drivers Untrusted Pointer Dereference

Affected Software

Remediation

Event History

Frequently Asked Questions

Who is exposed to this issue?

What access does an attacker need?

What is the expected impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What access does an attacker need?

What is the expected impact if exploitation succeeds?