[ Vendor · 5 CVEs ]
HMS Networks
CVEs affecting HMS Networks published in the last 30 days, plus any HMS Networks CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-110322 | 20 Oct 2026 | CVSS 5.5 | HMS Networks PEAK-System Device Driver SetupThe PEAK-System PCAN type 0x4030 processing path fails to validate a selected/returned object pointer before dereferencing fixed fields during… | |
| CVE-2026-105960 | 20 Oct 2026 | CVSS 5.5 | HMS Networks PEAK-System Device Driver SetupPEAK-System PCAN contains a vulnerable operation involving a variable-length receive-record copy. The driver uses a requested or queued record count… | |
| CVE-2026-109576 | 20 Oct 2026 | CVSS 5.5 | HMS Networks PEAK-System Device Driver SetupThe parser in PEAK-System PCAN driver correctly detected the malformed record, but the loop iterating the record list advanced its processed-bytes… | |
| CVE-2026-101103 | 20 Oct 2026 | CVSS 5.5 | HMS Networks PEAK-System Device Driver SetupThe PEAK-System PCAN diagnostic call did not validate that the caller-supplied output buffer was large enough to hold the output record. | |
| CVE-2026-103672 | 20 Oct 2026 | CVSS 7.1 | HMS Networks PEAK-System Device Driver SetupThe PEAK-System PCAN parser indexes a length table using attacker-controlled DLC without enforcing DLC <= 0x0f, then copies attacker payload from… |