High severity7.1NVD Advisory· Published Oct 20, 2026
CVE-2026-103672
CVE-2026-103672
Description
The PEAK-System PCAN parser indexes a length table using attacker-controlled DLC without enforcing DLC <= 0x0f, then copies attacker payload from record+0x1c into a fixed-size stack destination.
Affected products
1Patches
Vulnerability mechanics
References
4News mentions
1- HMS Networks PEAK-System PCAN Windows driversCISA ICS Advisories