Quick answers
- Is CVE-2026-101103 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-101103 being exploited in the wild.
- How severe is CVE-2026-101103?
- High severity, with a CVSS score of 5.5, published 20 October 2026.
- Which products and versions are affected?
- HMS Networks PCAN Windows CAN device drivers <=5.1.2; HMS Networks PEAK-System Device Driver Setup <=5.1.2.1151.
- Is there a fix for CVE-2026-101103?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-101103 attacked?
- It is attacked with local access.
- Am I affected by CVE-2026-101103?
- Check whether you run HMS Networks PCAN Windows CAN device drivers or HMS Networks PEAK-System Device Driver Setup at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
The PCAN drivers contain multiple memory safety issues including out-of-bounds writes, buffer overflows, array index validation failures, and improper pointer dereference handling. These vulnerabilities reside in the device driver kernel-mode code and can be triggered through crafted I/O control requests or device interactions. Local exploitation leads to kernel crash and denial of service.
Affected products
- HMS Networks PEAK-System Device Driver Setup <=5.1.2.1151
- HMS Networks PCAN Windows CAN device drivers <=5.1.2
Identifiers
- CVE-2026-101103
- CVE-2026-109576
- CVE-2026-103672
- CVE-2026-105960
- CVE-2026-110322
- CVE-2026-94188
Timeline
- 2026-10-20: advisory: CISA ICS Advisory ICSA-26-293-01 published