Object Pointer Validation Flaw in PEAK-System PCAN Product
CVE-2026-110322

6.8MEDIUM

Key Information:

Vendor: Hms Networks
Status: Peak-system Device Driver Setup; Pcan Windows Can Device Drivers
Vendor: CVE Published:; 20 October 2026

🔔 Create Hms Networks Vulnerability Alert

What is CVE-2026-110322?

The PEAK-System PCAN software exposes a vulnerability in its type 0x4030 processing path. This flaw arises from the failure to properly validate selected or returned object pointers before dereferencing fixed fields during post-processing, potentially leading to unwanted behavior or system instability. Organizations using affected PEAK-System products should review their configurations and apply any available patches to mitigate this risk.

Affected Version(s)

PCAN Windows CAN device drivers 0 <= 5.1.2

PEAK-System Device Driver Setup 0 <= 5.1.2.1151

PCAN Windows CAN device drivers 5.1.4

References

https://www.hms-networks.com/cybersecurity

https://www.peak-system.com/support/downloads/software/

https://www.cisa.gov/news-events/ics-advisories/icsa-26-2...

CVSS V4

Score:

6.8

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Attack Required:

None

Privileges Required:

Undefined

User Interaction:

None

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 20, 2026
Vulnerability Reserved
Oct 15, 2026

Credit

Seyeon Bang reported this vulnerability to CISA.

CVE-2026-110322 Data

JSON