CVE-2026-110322— HMS Networks PEAK-System PCAN Windows drivers Untrusted Pointer Dereference
Quick assessment
Affected
HMS Networks PEAK-System Device Driver Setup
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
PEAK-System PCAN 类型 0x4030 的处理路径在后期处理期间解引用固定字段之前，未能对已选择或返回的对象指针进行验证。
Possible ATT&CK Techniques 1 AI
T1212.001
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-110322
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
HMS Networks PEAK-System PCAN Windows drivers Untrusted Pointer Dereference
Source: CVE Program / CVE List V5
Vulnerability Description
The PEAK-System PCAN type 0x4030 processing path fails to validate a selected/returned object pointer before dereferencing fixed fields during post-processing.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
非可信指针解引用
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| HMS Networks | PEAK-System Device Driver Setup | 0 ~ 5.1.2.1151 | - |
|
| HMS Networks | PCAN Windows CAN device drivers | 0 ~ 5.1.2 | - |
|
II. Public POCs for CVE-2026-110322
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-110322
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-110322 (3)
Same Patch Batch · HMS Networks · 2026-10-20 · 5 CVEs total
| CVE-2026-103672 | 7.1 HIGH | HMS Networks PEAK-System PCAN Windows drivers Improper Validation of Array Index |
| CVE-2026-101103 | 5.5 MEDIUM | HMS Networks PEAK-System PCAN Windows drivers Classic Buffer Overflow |
| CVE-2026-109576 | 5.5 MEDIUM | HMS Networks PEAK-System PCAN Windows drivers Out-of-bounds Write |
| CVE-2026-105960 | 5.5 MEDIUM | HMS Networks PEAK-System PCAN Windows drivers Improper Handling of Length Parameter Incons |
IV. Related Vulnerabilities
Same product: PEAK-System Device Driver Setup
-
CVE-2026-105960
HMS Networks PEAK-System PCAN Windows drivers Improper Handl -
CVE-2026-103672
HMS Networks PEAK-System PCAN Windows drivers Improper Valid -
CVE-2026-101103
HMS Networks PEAK-System PCAN Windows drivers Classic Buffer -
CVE-2026-109576
HMS Networks PEAK-System PCAN Windows drivers Out-of-bounds
Same vendor: HMS Networks
-
CVE-2026-105960
HMS Networks PEAK-System PCAN Windows drivers Improper Handl -
CVE-2026-103672
HMS Networks PEAK-System PCAN Windows drivers Improper Valid -
CVE-2026-101103
HMS Networks PEAK-System PCAN Windows drivers Classic Buffer -
CVE-2026-109576
HMS Networks PEAK-System PCAN Windows drivers Out-of-bounds -
CVE-2025-0432
HMS Networks Ewon Flexy 202 Cleartext Transmission of Sensit
Same weakness: CWE-822
-
CVE-2026-108435
Microsoft Office Word Information Disclosure Vulnerability -
CVE-2026-103578
Windows Kernel Elevation of Privilege Vulnerability -
CVE-2026-102186
Windows Network File System Information Disclosure Vulnerabi -
CVE-2026-102188
Windows Storage Port Driver Elevation of Privilege Vulnerabi -
CVE-2026-88219
RPC Runtime Library Remote Code Execution Vulnerability
V. Comments for CVE-2026-110322
No comments yet