CVE-2026-110322Medium· 5.5▾ SunlitThe PEAK-System PCAN type 0x4030 processing path fails to validate a selected/returned object pointer before dereferencing fixed fields during post-processing.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 22.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.1%
The PEAK-System PCAN type 0x4030 processing path fails to validate a selected/returned object pointer before dereferencing fixed fields during post-processing.
peak-system_device_driver_setup <= 5.1.2.1151pcan_windows_can_device_drivers <= 5.1.2HMS Networks AB has addressed the issue in version 5.1.4 and recommends that users upgrade to the newest available version. Users can find software updates for PEAK-System PCAN on the software download page https://www.peak-system.com/support/downloads/software/ .
For more information see the associated HMS security advisory https://www.hms-networks.com/cybersecurity .
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-109576Medium· 5.5HMS Networks PEAK-System PCAN Windows drivers Out-of-bounds Write
CVE-2026-101103Medium· 5.5HMS Networks PEAK-System PCAN Windows drivers Classic Buffer Overflow
CVE-2026-103672High· 7.1HMS Networks PEAK-System PCAN Windows drivers Improper Validation of Array Index
CVE-2026-105960Medium· 5.5HMS Networks PEAK-System PCAN Windows drivers Improper Handling of Length Parameter Inconsistency
CVE-2026-88781Medium· 6.8Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O command, leading to subsequent system information being tampered with or causing …
CVE-2026-19676High· 7.8PECI transfer syscall verifier does not validate embedded user buffer pointers, allowing arbitrary kernel memory read/write from user mode