Is CVE-2026-109576 known to be exploited?

It is not marked known-exploited in this record.

CVE-2026-109576

HMS Networks AB has addressed the issue in version 5.1.4. Users of PEAK-System Device Driver Setup <=5.1.2.1151 and PCAN Windows CAN device drivers <=5.1.2 should upgrade to the newest available version immediately. See the associated HMS security advisory for update instructions and download links via the PEAK-System software download page.

Quick answers

What is CVE-2026-109576?: HMS Networks AB has addressed the issue in version 5.1.4. Users of PEAK-System Device Driver Setup <=5.1.2.1151 and PCAN Windows CAN device drivers <=5.1.2 should upgrade to the newest available version immediately. See the associated HMS security advisory for update instructions and download links via the PEAK-System software download page.
How severe is CVE-2026-109576?: medium, CVSS 6.8
Is CVE-2026-109576 known to be exploited?: It is not marked known-exploited in this record.
How should CVE-2026-109576 be mitigated?: HMS Networks AB has addressed the issue in version 5.1.4. Users of PEAK-System Device Driver Setup <=5.1.2.1151 and PCAN Windows CAN device drivers <=5.1.2 should upgrade to the newest available version immediately. See the associated HMS security advisory for update instructions and download links via the PEAK-System software download page.

CVSS

6.8

Vendor

—

Published

Oct 21, 2026 · 02:10

Patch

Unknown / not confirmed

Affected products

PEAK-System Device Driver Setup, PCAN Windows CAN device drivers

Mitigation

Six CVEs Identified in HMS Networks PEAK-System PCAN Windows Drivers

CISA has issued an industrial control systems advisory (ICSA-26-293-01) disclosing six vulnerabilities in HMS Networks PEAK-System PCAN Windows drivers. The flaws, tracked as CVE-2026-109576 through CVE-2026-105960, span out-of-bounds writes, classic buffer overflows, improper array index validation, untrusted pointer dereference, and length parameter inconsistency. Successful exploitation could crash the Windows kernel. Affected versions include PEAK-System Device Driver Setup <=5.1.2.1151 and PCAN Windows CAN device drivers <=5.1.2. HMS Networks has addressed the issues in version 5.1.4 and recommends users upgrade immediately.

11m

CVE-2026-109576

Quick answers

Related News

Six CVEs Identified in HMS Networks PEAK-System PCAN Windows Drivers