HMS Networks
Vulnerability activity for HMS Networks: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 6
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 6
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 6
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 5.5MediumOct 20, 2026HMS Networks PEAK-System Device Driver SetupCVE-2026-105960PEAK-System PCAN contains a vulnerable operation involving a variable-length receive-record copy. The driver uses a requested or queued record count without sufficiently capping the copy to the actual caller-supplied output length.
- 5.5MediumOct 20, 2026HMS Networks PEAK-System Device Driver Setup Memory corruptionCVE-2026-110322The PEAK-System PCAN type 0x4030 processing path fails to validate a selected/returned object pointer before dereferencing fixed fields during post-processing.
- 7.1HighOct 20, 2026HMS Networks PEAK-System Device Driver SetupCVE-2026-103672The PEAK-System PCAN parser indexes a length table using attacker-controlled DLC without enforcing DLC <= 0x0f, then copies attacker payload from record+0x1c into a fixed-size stack destination.
- 5.5MediumOct 20, 2026HMS Networks PEAK-System Device Driver Setup Memory corruptionCVE-2026-101103The PEAK-System PCAN diagnostic call did not validate that the caller-supplied output buffer was large enough to hold the output record.
- 5.5MediumOct 20, 2026HMS Networks PEAK-System Device Driver Setup Memory corruptionCVE-2026-109576The parser in PEAK-System PCAN driver correctly detected the malformed record, but the loop iterating the record list advanced its processed-bytes counter even when a record had been rejected as invalid.
- –UnscoredOct 20, 2026HMS NetworksCVE-2026-94188
Top products
- PEAK-System Device Driver Setup5 CVEs in the last year
Advisories
Official advisories from the last 90 days that name this vendor's CVEs.
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.