Six CVEs Identified in HMS Networks PEAK-System PCAN Windows Drivers
Multiple vulnerabilities could allow kernel-mode crashes on Windows systems
Key Takeaways
- Six CVEs disclosed in HMS Networks PEAK-System PCAN Windows drivers on October 20, 2026.
- Vulnerabilities could allow local attackers to crash the Windows kernel via out-of-bounds writes and buffer overflows.
- Affected versions: PEAK-System Device Driver Setup <=5.1.2.1151 and PCAN Windows CAN device drivers <=5.1.2.
- HMS Networks has released version 5.1.4 as a fix; users are strongly advised to upgrade.
- No confirmed wild exploitation as of the advisory date; impact is primarily availability-focused.
Related Security News
PHP Security Team Warns of Two Critical Vulnerabilities Ahead of Emergency Patches
The PHP security team has warned administrators to prepare for emergency security updates scheduled for tomorrow. The updates will address two critical vulnerabilities, the details of which were reportedly leaked ahead of their scheduled disclosure. The organization has advised web server administrators and application owners to make preparations for immediate patching upon release.
Multiple Vulnerabilities Discovered in Hitachi Energy RTU500 Series CMU Firmware
Hitachi Energy has disclosed seven vulnerabilities affecting the RTU500 series CMU Firmware across multiple version ranges. The flaws range from NULL pointer dereference and type confusion to authentication bypass vulnerabilities that could impact the confidentiality, integrity, and availability of energy sector industrial control systems. CISA has issued advisory ICSA-26-293-05 with remediation guidance.
